plexus-utils2

4 results · Feed

• High 8.8
  CVE-2025-67030

  Plexus-Utils has a Directory Traversal vulnerability in its extractFile method

  Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

  plexus-utils2 org.codehaus.plexus:plexus-utils plexus-utils2 plexus-utils Debian Ubuntu Maven
  Mar 25, 2026
• Medium 4.3
  CVE-2022-4245

  Codehaus-plexus: xml external entity (xxe) injection

  A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Maven
  Sep 25, 2023
• High 7.5
  CVE-2022-4244 Public exploit

  Codehaus-plexus: directory traversal

  A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by u…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Maven
  Sep 25, 2023
• Critical 9.8
  CVE-2017-1000487 Public exploit

  OS Command Injection in Plexus-utils

  Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

  plexus-utils2 org.codehaus.plexus:plexus-utils plexus-utils2 plexus-utils Debian Ubuntu Maven
  Jan 3, 2018