Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: codehaus-plexus Component: Plexus-utils Clear all filters
TI-2025-41106 CVE-2025-67030 · GHSA-6fmv-xxpf-w3cw

Directory Traversal vulnerability in the extractFile method of…

Priority MEDIUM 41

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00689 Published 2026-03-25 Partial fix · 4.0.3, 3.6.1 CWE-22
TI-2022-03885 CVE-2022-4244 · GHSA-g6ph-x5wf-g337

Codehaus-plexus: directory traversal

Priority HIGH 72

A flaw was found in codeplex-codehaus.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01347 Published 2023-09-25 Partial fix · 3.0.24 CWE-22