Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-3431 EUVD-2023-1850GHSA-p2mf-q26j-3xmh

Improper Access Control in plantuml/plantuml

Published Jun 27, 2023 · Updated Feb 13, 2025 · Assigned by @huntrdev

Description

Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.

Affected products

VendorProductAffectedFixed
plantuml plantuml/plantuml unspecified – < 1.2023.9 1.2023.9

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 plantuml No fix yet —
Debian 13 plantuml No fix yet —
Debian 12 plantuml No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS plantuml No fix yet —
Ubuntu 22.04 LTS plantuml No fix yet —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven net.sourceforge.plantuml:plantuml-mit < 1.2023.9 1.2023.9 GHSA-p2mf-q26j-3xmh

References