PL
Product
Plexus-utils
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add Plexus-utils to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1000487 | 9.8 | Jan 3 | Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings Affected: before 3.0.16 |
| CVE-2025-67030 | 8.8 | Mar 25 | Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642 Affected: before 3.6.1; 4.0.0 before 4.0.3 |
| CVE-2022-4244 | 7.5 | Sep 25 | A flaw was found in codeplex-codehaus Affected: before 3.0.24 |
| CVE-2022-4245 | 4.3 | Sep 25 | A flaw was found in codehaus-plexus Affected: before 3.0.24 |
Showing 4