Critical DLA-1236-1 1 CVE

plexus-utils - security update

Published Jan 9, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	plexus-utils	1:1.5.15-4+deb7u1

Vulnerabilities 1

Critical 9.8

CVE-2017-1000487 Public exploit

OS Command Injection in Plexus-utils

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

plexus-utils2 org.codehaus.plexus:plexus-utils plexus-utils2 plexus-utils Debian Ubuntu Maven

Jan 3, 2018