CO
Vendor
Codehaus-plexus
6
CVEs
0
On KEV
0
New 30D
Products
PL9.8
Plexus-utils
Codehaus-plexus
4 CVEs0 on KEV0 new
PL9.8
plexus-archiver
codehaus-plexus
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-67030 | PL Plexus-utils Codehaus-plexus | 8.8 | Mar 25 | Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642 |
| CVE-2022-4245 | PL Plexus-utils Codehaus-plexus | 4.3 | Sep 25 | Codehaus-plexus: xml external entity (xxe) injection |
| CVE-2022-4244 | PL Plexus-utils Codehaus-plexus | 7.5 | Sep 25 | Codehaus-plexus: directory traversal |
| CVE-2023-37460 | PL plexus-archiver codehaus-plexus | 9.8 | Jul 25 | Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver |
| CVE-2018-1002200 | PL Plexus-archiver Codehaus-plexus | 5.5 | Jul 25 | plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled… |
| CVE-2017-1000487 | PL Plexus-utils Codehaus-plexus | 9.8 | Jan 3 | Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings |