codehaus-plexus plexus-utils 1.5.1

CPE Details

codehaus-plexus plexus-utils 1.5.1
codehaus-plexus
plexus-utils
1.5.1
2024-10-10
17h55 +00:00
2024-10-10
17h55 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:codehaus-plexus:plexus-utils:1.5.1:*:*:*:*:*:*:*

Informations

Vendor

codehaus-plexus

Product

plexus-utils

Version

1.5.1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-4245 2023-09-25 19h20 +00:00 A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.
4.3
Moyen
CVE-2022-4244 2023-09-25 19h20 +00:00 A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.
7.5
Haute
CVE-2017-1000487 2018-01-03 19h00 +00:00 Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
9.8
Critique