Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream | plexus-utils | 0:3.3.0-10.el9_4.2 |
Vulnerabilities 1
-
High 8.8
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2451409
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35992.json
-
report
https://access.redhat.com/security/cve/CVE-2025-67030
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-67030
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-67030
-
article
https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec
-
article
https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642
-
article
https://github.com/codehaus-plexus/plexus-utils/issues/294
-
article
https://github.com/codehaus-plexus/plexus-utils/pull/295
-
article
https://github.com/codehaus-plexus/plexus-utils/pull/296