Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2018-1002200 3 Codehaus-plexus, Debian, Redhat 6 Plexus-archiver, Debian Linux, Enterprise Linux and 3 more 2024-11-21 N/A
plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVE-2017-1000487 3 Codehaus-plexus, Debian, Redhat 4 Plexus-utils, Debian Linux, Jboss Amq and 1 more 2024-11-21 9.8 Critical
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.