Codehaus-plexus - vulnerabilities (CVEs)

6 CVEs in 2 products, 0 in the last 30 days, newest from 2026-03-25.

Products

• Plexus-utils - 4 CVEs
• Plexus-archiver - 2 CVEs

Newest CVEs of Codehaus-plexus

• CVE-2025-67030 - CVSS 8.8 (high), 2026-03-25: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…
• CVE-2022-4244 - CVSS 7.5 (high), 2023-09-25: A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the…
• CVE-2022-4245 - CVSS 4.3 (medium), 2023-09-25: A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue…
• CVE-2023-37460 - CVSS 9.8 (critical), 2023-07-25: Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior…
• CVE-2018-1002200 - CVSS 5.5 (medium), 2018-07-25: plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive…
• CVE-2017-1000487 - CVSS 9.8 (critical), 2018-01-03: Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.