Vulnerabilities

TI-2018-16132 CVE-2018-1002200 · GHSA-hcxq-x77q-3469

Path traversal in Codehaus plexus-archiver

LOW 38

plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.11579 Published 2018-07-25 Partial fix · 3.6.0 CWE-22

TI-2012-04858 CVE-2012-5817 · GHSA-5jc8-8xhv-g8qm

Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and…

LOW 34

Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fi…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00778 Published 2012-11-04 No fix listed CWE-295

Vulnerabilities

Filters

Path traversal in Codehaus plexus-archiver

Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and…