Apache Continuum Command Injection Vulnerability Allowing Remote Code Execution

A command injection vulnerability allowing remote code execution has been identified in Apache Continuum. This issue affects all versions of the software. The vulnerability arises from improper neutralization of special elements used in commands, which can be exploited by attackers with access to the installation's REST API to invoke arbitrary commands on the server. As Apache Continuum is a retired project, no official fix will be released. Users are advised to seek alternatives or restrict access to trusted users.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the server where Apache Continuum is installed.