PL
Product
plexus-archiver
by codehaus-plexus · last CVE Jul 25, 2023
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch

Add plexus-archiver to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-37460
9.8
2%
Jul 25
Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver
Affected: < 4.8.0
CVE-2018-1002200
5.5
12%
Jul 25
plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled…
Affected: before 3.6.0
Showing 2