Plexus-utils (Codehaus-plexus) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 67 known versions, newest CVE from 2026-03-25. Vendor: Codehaus-plexus.

CVEs of Plexus-utils

• CVE-2025-67030 - CVSS 8.8 (high), 2026-03-25: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…
• CVE-2022-4245 - CVSS 4.3 (medium), 2023-09-25: A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue…
• CVE-2022-4244 - CVSS 7.5 (high), 2023-09-25: A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the…
• CVE-2017-1000487 - CVSS 9.8 (critical), 2018-01-03: Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.