Critical DSA-4146-1 1 CVE

plexus-utils - security update

Published Mar 20, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 8	plexus-utils	1:1.5.15-4+deb8u1
Debian · 9	plexus-utils	1:1.5.15-4+deb9u1

Vulnerabilities 1

Critical 9.8

CVE-2017-1000487 Public exploit

OS Command Injection in Plexus-utils

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

plexus-utils2 org.codehaus.plexus:plexus-utils plexus-utils2 plexus-utils Debian Ubuntu Maven

Jan 3, 2018