Critical DSA-4149-1 1 CVE

plexus-utils2 - security update

Published Mar 22, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	plexus-utils2	3.0.15-1+deb8u1

Vulnerabilities 1

Critical 9.8

CVE-2017-1000487 Public exploit

OS Command Injection in Plexus-utils

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

plexus-utils2 org.codehaus.plexus:plexus-utils plexus-utils2 plexus-utils Debian Ubuntu Maven

Jan 3, 2018