Plexus-archiver (Codehaus-plexus) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 92 known versions, newest CVE from 2023-07-25. Vendor: Codehaus-plexus.

CVEs of Plexus-archiver

• CVE-2023-37460 - CVSS 9.8 (critical), 2023-07-25: Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior…
• CVE-2018-1002200 - CVSS 5.5 (medium), 2018-07-25: plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive…