codehaus-plexus

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

codehaus-plexus records in CISA KEV

No codehaus-plexus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Plexus-utils 4 records HIGH Plexus-archiver 2 records HIGH

Records

2 records in Plexus-archiver · all components

TI-2023-19069 CVE-2023-37460 · GHSA-wh3p-fphp-9h2m

Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver

HIGH 76

Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02482 Published 2023-07-25 Partial fix · 4.8.0 CWE-22

TI-2018-16132 CVE-2018-1002200 · GHSA-hcxq-x77q-3469

Path traversal in Codehaus plexus-archiver

LOW 38

plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.11579 Published 2018-07-25 Partial fix · 3.6.0 CWE-22

Open these records in search →

Critical	2
High	2
Medium	2
Low	0
No CVSS	0