codehaus-plexus plexus-utils 3.0.5

CPE Details

codehaus-plexus plexus-utils 3.0.5
codehaus-plexus
plexus-utils
3.0.5
2024-10-10
17h55 +00:00
2024-10-10
17h55 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:codehaus-plexus:plexus-utils:3.0.5:*:*:*:*:*:*:*

Informations

Vendor

codehaus-plexus

Product

plexus-utils

Version

3.0.5

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-4245 2023-09-25 19h20 +00:00 A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.
4.3
Medium
CVE-2022-4244 2023-09-25 19h20 +00:00 A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.
7.5
High
CVE-2017-1000487 2018-01-03 19h00 +00:00 Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
9.8
Critical