Security Apache Continuum 1.4.2 Command Injection / Cross Site Scripting June 7, 2016 007admin Leave a comment Apache Continuum version 1.4.2 suffers from command injection and cross site scripting vulnerabilities.