Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Ivy

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2022-37865

    Apache Ivy allows creating/overwriting any file on the system

    With Apache Ivy 2.4.0 an optional packaging attribute has been introduced that allows artifacts to be unpacked on the fly if they used pack200 or zip packaging. For artifacts using the "zip", "jar" or "war" packaging Ivy prior to 2.5.1 doesn't verify the targ…

    Apache Software Foundation Apache Ivy org.apache.ivy:ivy Maven