PT-2025-29245 · Apache+6 · Apache Commons Lang+7
CVE-2025-48924
·
Published
2025-07-11
·
Updated
2026-08-02
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions:
Apache Commons Lang versions 2.0 through 2.6
Apache Commons Lang3 versions 3.0 through 3.17.9
Description:
The
ClassUtils.getClass() method can cause a StackOverflowError when processing excessively long inputs. This error can lead to application termination as errors are typically unhandled.Recommendations:
Upgrade to version 3.18.0.
Exploit
Fix
DoS
Uncontrolled Recursion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Apache Commons Lang
Apache Commons Lang3
Debian
Linuxmint
Red Os
Suse
Ubuntu