CVE-2020-17521
- Source
- https://cve.org/CVERecord?id=CVE-2020-17521
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-17521.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2020-17521
- Aliases
- Downstream
CGA (94)
- CGA-2729-999g-mgxw
- CGA-2f87-9p8c-mx97
- CGA-2mm6-r6v4-x37v
- CGA-2q34-p4gf-mfm6
- CGA-33gp-8mqr-c3hv
- CGA-37rw-67xx-cwvw
- CGA-387c-pjvj-mf3m
- CGA-3c97-6pv2-xxwj
- CGA-3jqc-p8p2-wgf6
- CGA-4jxr-jqgj-r4xw
- CGA-4rrp-rvgm-6x2q
- CGA-58cj-r8pp-896r
- CGA-59g7-7g53-x5hx
- CGA-5m82-p2j5-whr2
- CGA-5rvv-8gjx-3vhx
- CGA-5x7v-2xhx-v663
- CGA-6464-hfg5-h9p5
- CGA-67v4-3cr3-wc67
- CGA-6ch9-p927-rw7g
- CGA-6mmx-3478-f2jx
- CGA-6v72-3887-2mrg
- CGA-6w67-4mqq-5gx9
- CGA-745m-8jj4-4cw9
- CGA-789h-7wv8-9w4v
- CGA-7m57-j3jw-5983
- CGA-7pj2-j7qg-w2x3
- CGA-8346-pj6m-q34h
- CGA-855j-j524-h88m
- CGA-8hwp-f95f-qgxm
- CGA-8j8x-5c6m-xcj7
- CGA-8rhh-9xhf-9frc
- CGA-9jxp-3g33-cp86
- CGA-c3p3-pf97-hg7f
- CGA-c548-49j5-qg2j
- CGA-c97h-gmj6-9cvx
- CGA-cg46-cchr-cvg9
- CGA-cgm8-6vj5-c8f4
- CGA-ch6h-hqmh-8vm8
- CGA-fqpx-8p4w-wmww
- CGA-g7c7-g569-vqpw
- CGA-g9v7-462f-8cwj
- CGA-gp2p-fmqx-mj49
- CGA-gv89-pv58-gg4r
- CGA-gvmq-jffj-3v49
- CGA-gx53-52w3-vjj9
- CGA-gxh5-p8qg-mxqw
- CGA-hmmv-9hj7-mxrf
- CGA-j4hc-c7p2-wwg8
- CGA-j4vc-whqx-f7wr
- CGA-j7g2-j7p7-2233
- CGA-j86h-pvxr-23w4
- CGA-jfpj-53hm-phf2
- CGA-jg7m-qqww-7x8j
- CGA-jgfq-9hc4-xxjh
- CGA-jxq7-pq5j-x8pg
- CGA-m5v9-mxg5-577x
- CGA-m5wp-7hwp-q5j8
- CGA-m689-hww2-32c8
- CGA-mf95-6php-365c
- CGA-mqvj-3mc5-w7wm
- CGA-p2c9-jcjj-8qqw
- CGA-p722-jq84-7hpg
- CGA-p7gc-fmm5-88h8
- CGA-pcf9-7wxx-cj9q
- CGA-pgmh-vff2-g76c
- CGA-pqcf-26m4-cwr6
- CGA-q5xv-ww82-p8fg
- CGA-q6cx-4v79-qx5g
- CGA-qc38-qcf4-4jc9
- CGA-qcf9-6v6v-qg7p
- CGA-r4wh-c3cv-wj67
- CGA-r9gw-627q-372m
- CGA-r9qc-6c37-xrc9
- CGA-rfm7-ppmg-6534
- CGA-rgq3-56fw-j5m8
- CGA-rjjw-7hjw-h234
- CGA-v3q8-p95p-r7cj
- CGA-vpp4-5g56-w359
- CGA-vv25-94hw-q97j
- CGA-vv7w-96x8-p6pw
- CGA-w4pq-4x75-vwmf
- CGA-w57w-9r42-2j8h
- CGA-w868-8r53-2g7f
- CGA-w8rm-g4hq-q9cv
- CGA-w999-qq28-2x4p
- CGA-wf9h-6xh3-hv7v
- CGA-wfxf-c8gw-p2mc
- CGA-wjqr-8qcm-2g22
- CGA-wx7w-c5j6-gx44
- CGA-x2gx-vw6f-wg97
- CGA-x88g-w9m7-hhp6
- CGA-x8hf-gp4g-6f85
- CGA-xhmc-x3cq-f388
- CGA-xhqp-ccwm-x382
DEBIAN (1)
openSUSE (2)
SUSE (1)
UBUNTU (1)
- Related
- Published
- 2020-12-07T20:15:12Z
- Modified
- 2026-08-27T11:47:09Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:oracle:insurance_policy_administration:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "11.0" }, { "last_affected": "11.3.1" } ], "source": "CPE_RANGE", "vendor_product": "oracle:insurance_policy_administration" }, { "cpes": [ "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "17.12.0" }, { "last_affected": "17.12.10" } ], "source": "CPE_RANGE", "vendor_product": "oracle:primavera_gateway" }, { "cpes": [ "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "17.7" }, { "last_affected": "17.12" } ], "source": "CPE_RANGE", "vendor_product": "oracle:primavera_unifier" }, { "cpes": [ "cpe:2.3:a:apache:atlas:2.1.0:-:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "2.1.0-NA" }, { "last_affected": "2.1.0-NA" } ], "source": "CPE_STRING", "vendor_product": "apache:atlas" }, { "cpes": [ "cpe:2.3:a:apache:groovy:4.0.0:alpha1:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "4.0.0-alpha1" }, { "last_affected": "4.0.0-alpha1" } ], "source": "CPE_STRING", "vendor_product": "apache:groovy" }, { "cpes": [ "cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "6.2.1.0" }, { "last_affected": "6.2.1.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:agile_engineering_data_management" }, { "cpes": [ "cpe:2.3:a:oracle:agile_plm_mcad_connector:3.4:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:agile_plm_mcad_connector:3.6:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "3.4" }, { "last_affected": "3.4" }, { "introduced": "3.6" }, { "last_affected": "3.6" } ], "source": "CPE_STRING", "vendor_product": "oracle:agile_plm_mcad_connector" }, { "cpes": [ "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "9.3.3" }, { "last_affected": "9.3.3" }, { "introduced": "9.3.6" }, { "last_affected": "9.3.6" } ], "source": "CPE_STRING", "vendor_product": "oracle:agile_product_lifecycle_management" }, { "cpes": [ "cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" }, { "introduced": "12.2.1.4.0" }, { "last_affected": "12.2.1.4.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:business_process_management_suite" }, { "cpes": [ "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:11.3.0.9.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.3:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "11.3.0.9.0" }, { "last_affected": "11.3.0.9.0" }, { "introduced": "12.0.0.3" }, { "last_affected": "12.0.0.3" } ], "source": "CPE_STRING", "vendor_product": "oracle:communications_brm_-_elastic_charging_engine" }, { "cpes": [ "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "8.4.0.0" }, { "last_affected": "8.4.0.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:communications_diameter_signaling_router" }, { "cpes": [ "cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "7.1" }, { "last_affected": "7.1" } ], "source": "CPE_STRING", "vendor_product": "oracle:communications_evolved_communications_application_server" }, { "cpes": [ "cpe:2.3:a:oracle:communications_services_gatekeeper:6.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_services_gatekeeper:6.1:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "6.0" }, { "last_affected": "6.0" }, { "introduced": "6.1" }, { "last_affected": "6.1" }, { "introduced": "7.0" }, { "last_affected": "7.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:communications_services_gatekeeper" }, { "cpes": [ "cpe:2.3:a:oracle:healthcare_data_repository:7.0.2:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "7.0.2" }, { "last_affected": "7.0.2" } ], "source": "CPE_STRING", "vendor_product": "oracle:healthcare_data_repository" }, { "cpes": [ "cpe:2.3:a:oracle:hospitality_opera_5:5.6:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "5.6" }, { "last_affected": "5.6" } ], "source": "CPE_STRING", "vendor_product": "oracle:hospitality_opera_5" }, { "cpes": [ "cpe:2.3:a:oracle:ilearning:6.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:ilearning:6.3:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "6.2" }, { "last_affected": "6.2" }, { "introduced": "6.3" }, { "last_affected": "6.3" } ], "source": "CPE_STRING", "vendor_product": "oracle:ilearning" }, { "cpes": [ "cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2.6.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "9.2.6.0" }, { "last_affected": "9.2.6.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:jd_edwards_enterpriseone_orchestrator" }, { "cpes": [ "cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "16.1" }, { "last_affected": "16.1" }, { "introduced": "16.2" }, { "last_affected": "16.2" }, { "introduced": "18.8" }, { "last_affected": "18.8" }, { "introduced": "19.12" }, { "last_affected": "19.12" }, { "introduced": "20.12" }, { "last_affected": "20.12" } ], "source": "CPE_STRING", "vendor_product": "oracle:primavera_unifier" }, { "cpes": [ "cpe:2.3:a:oracle:retail_bulk_data_integration:15.0.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "15.0.3.0" }, { "last_affected": "15.0.3.0" }, { "introduced": "16.0.3.0" }, { "last_affected": "16.0.3.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:retail_bulk_data_integration" }, { "cpes": [ "cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "16.0.3" }, { "last_affected": "16.0.3" } ], "source": "CPE_STRING", "vendor_product": "oracle:retail_merchandising_system" }, { "cpes": [ "cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.10:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.5:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3.5:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "14.1.3.10" }, { "last_affected": "14.1.3.10" }, { "introduced": "15.0.3.5" }, { "last_affected": "15.0.3.5" }, { "introduced": "16.0.3.5" }, { "last_affected": "16.0.3.5" } ], "source": "CPE_STRING", "vendor_product": "oracle:retail_store_inventory_management" } ] }- References
-
- https://lists.apache.org/thread.html/r4b2f13c302eec98838ff7475253091fb9b75bc1038016ba00ebf6c08%40%3Cdev.atlas.apache.org%3E
- https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465%40%3Cnotifications.groovy.apache.org%3E
- https://lists.apache.org/thread.html/rea63a4666ba245d2892471307772a2d8ce0f0741f341d6576625c1b3%40%3Cdev.atlas.apache.org%3E
- https://groovy-lang.org/security.html#CVE-2020-17521
- https://security.netapp.com/advisory/ntap-20201218-0006/
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
Affected packages
Git / github.com/apache/groovy
Affected ranges
- Type
- GIT
- Repo
- https://github.com/apache/groovy
- Events
-
IntroducedLast AffectedIntroducedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:apache:groovy:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "2.0.0" }, { "last_affected": "2.4.20" }, { "introduced": "2.5.0" }, { "last_affected": "2.5.13" }, { "introduced": "3.0.0" }, { "last_affected": "3.0.6" } ], "source": "CPE_RANGE" }