MEDIUM 5.3 Microsoft

CVE-2025-48924

Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs

Microsoft Security Update 2025-Jul: Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs

Affected Products

References

Published: 2025-07-08 · Source: Microsoft · Feed updated: 2026-09-19
This medium severity vulnerability with a CVSS score of 5.3 was published on 2025-07-08 via Microsoft. Affected: cbl2 apache-commons-lang3 3.8.1-5 on CBL Mariner 2.0, azl3 apache-commons-lang3 3.8.1-6 on Azure Linux 3.0, cbl2 apache-commons-lang3 3.8.1-6 on CBL Mariner 2.0.
vulnfeed aggregates 14156 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.