Vendors / codehaus-plexus Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now codehaus-plexus records in CISA KEV No codehaus-plexus vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 76
Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02482 · Published 2023-07-25 · Partial fix · 4.8.0 CWE-22
Priority HIGH 72
A flaw was found in codeplex-codehaus.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01347 · Published 2023-09-25 · Partial fix · 3.0.24 CWE-22
Priority MEDIUM 51
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0649 · Published 2018-01-03 · Partial fix · 3.0.16 CWE-78
Priority MEDIUM 41
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00689 · Published 2026-03-25 · Partial fix · 4.0.3, 3.6.1 CWE-22
Priority LOW 38
plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction.
CVSS 3.0 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.11579 · Published 2018-07-25 · Partial fix · 3.6.0 CWE-22
Priority LOW 21
A flaw was found in codehaus-plexus.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00694 · Published 2023-09-25 · Partial fix · 3.0.24 CWE-91
Open these records in search → All records by CVSS severity
2 2 2 0 0
THREATIST.IORead the docs