[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feLllA7Jv3Xknd7n40HzanjOozeBaLSHHwxEsKxlyGNU":3,"g5a-risk:CVE-2020-1953":182},{"success":4,"data":5,"meta":180},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":27,"epssTimeSeries":39,"severity":41,"affectedProducts":42,"affectedProductsCount":90,"references":91,"referencesCount":107,"weaknesses":108,"weaknessesCount":112,"isActivelyExploited":113,"cisaInfo":27,"otxData":27,"relatedBlogPosts":114,"seoMetadata":115,"configurations":140,"relatedVendorCves":178,"notableEvents":179},"CVE-2020-1953","What is CVE-2020-1953?","Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML file was loaded from an untrusted source, it could therefore load and execute code out of the control of the host application.","Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special...","2020-03-13T15:15:11.373","2023-11-07T03:19:37.943",10,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,3.9,6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":12,"ImpactScore":37,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,6.4,0.06323,[40,38,38,38,38,38,38],0.06849,"Critical",[43,48,51,54,57,60,65,68,71,74,77,81,84,87],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","commons_configuration","2.2","cpe:2.3:a:apache:commons_configuration:2.2:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"2.3","cpe:2.3:a:apache:commons_configuration:2.3:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"2.4","cpe:2.3:a:apache:commons_configuration:2.4:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":55,"criteria":56,"vulnerable":4},"2.5","cpe:2.3:a:apache:commons_configuration:2.5:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":58,"criteria":59,"vulnerable":4},"2.6","cpe:2.3:a:apache:commons_configuration:2.6:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"oracle","database_server","11.2.0.4","cpe:2.3:a:oracle:database_server:11.2.0.4:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":66,"criteria":67,"vulnerable":4},"12.1.0.2","cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":69,"criteria":70,"vulnerable":4},"12.2.0.1","cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":72,"criteria":73,"vulnerable":4},"18c","cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":75,"criteria":76,"vulnerable":4},"19c","cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:*",{"vendor":61,"product":78,"version":79,"criteria":80,"vulnerable":4},"healthcare_foundation","7.1.1","cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:*",{"vendor":61,"product":78,"version":82,"criteria":83,"vulnerable":4},"7.2.0","cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:*",{"vendor":61,"product":78,"version":85,"criteria":86,"vulnerable":4},"7.2.1","cpe:2.3:a:oracle:healthcare_foundation:7.2.1:*:*:*:*:*:*:*",{"vendor":61,"product":78,"version":88,"criteria":89,"vulnerable":4},"7.3.0","cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:*",14,[92,96,99,102],{"url":93,"source":94,"tags":95},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fd0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3E","Apache",[],{"url":97,"source":94,"tags":98},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr16a2e949e35780c8974cf66104e812410f3904f752df6b66bf292269%40%3Ccommits.servicecomb.apache.org%3E",[],{"url":100,"source":94,"tags":101},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frde2186ad6ac0d6ed8d51af7509244adcf1ce0f9a3b7e1d1dd3b64676%40%3Ccommits.camel.apache.org%3E",[],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2020.html","Oracle",[106],"Third Party Advisory",4,[109],{"id":110,"name":110,"description":111},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":116,"metaDescription":117,"keywords":118,"canonicalUrl":119,"structuredData":120},"What is CVE-2020-1953? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-1953, a critical severity cyber security vulnerability from 2020. Apache Commons Configuration uses a third-party library ...","CVE-2020-1953, CVE-2020-1953 vulnerability, CVE-2020-1953 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, oracle security, commons_configuration vulnerability, database_server vulnerability","\u002Fwhat-is\u002Fcve-2020-1953",{"@context":121,"@type":122,"headline":116,"description":117,"datePublished":10,"dateModified":11,"author":123,"publisher":127,"about":131,"mainEntityOfPage":135,"articleSection":138,"keywords":139},"https:\u002F\u002Fschema.org","TechArticle",{"@type":124,"name":125,"url":126},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":124,"name":125,"url":126,"logo":128},{"@type":129,"url":130},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":132,"name":6,"description":133,"additionalType":134},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":136,"@id":137},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-1953","Cybersecurity","CVE-2020-1953, CVE-2020-1953 vulnerability, CVE-2020-1953 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[141,156],{"Operator":27,"Negate":27,"Nodes":142},[143],{"Operator":144,"Negate":27,"CPEMatch":145},"OR",[146,148,150,152,154],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"111C73BE-24B1-426A-A814-BDAA0178AFEB",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"88CB5ECB-C7DD-40B1-9030-8A490EFBB863",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3481DE19-1732-4C98-9D74-14496A722FF3",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":153,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2361B784-B34F-4362-9423-2E6A12E6CAFC",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":155,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CB3CCE06-C435-4BA6-B8CF-5DFA35C47D70",{"Operator":27,"Negate":27,"Nodes":157},[158],{"Operator":144,"Negate":27,"CPEMatch":159},[160,162,164,166,168,170,172,174,176],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":161,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C1E11A25-C7CE-49DF-99CA-352FD21B8230",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4F3D40B7-925C-413D-AFF3-60BF330D5BC2",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":165,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5C614BA7-7103-4ED7-ADD0-56064FE256A3",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":167,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6833701E-5510-4180-9523-9CFD318DEE6A",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":169,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B2204841-585F-40C7-A1D9-C34E612808CA",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":171,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"26A1F27B-C3AC-4D13-B9B2-2D6CF65D07BC",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":173,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B95E8056-51D8-4390-ADE3-661B7AE1D7CE",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":175,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"609D6EDF-D4D0-4370-9B8B-CA39D41946C0",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":177,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9059A907-508B-4844-8D7B-0FA68C0DF6A6",[],[],{"lastModified":11,"cacheTime":181,"version":33},1792347886016,{"score":183,"band":184,"action":185,"scoredAt":186},55,"Medium","Plan remediation","2026-10-16T06:48:05.075908+00:00"]