Codehaus Plexus

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-37460 Jul 25, 20:15 Maven CRITICAL POC PATCH Act Now

Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Path Traversal Plexus Archiver Codehaus Plexus

NVD GitHub

CVSS 3.1

9.8

EPSS

2.1%

CVE-2018-1002200 Jul 25, 17:29 Maven MEDIUM POC PATCH THREAT This Month

plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Path Traversal Debian Red Hat Debian Linux Enterprise Linux +4

NVD GitHub

CVSS 3.0

5.5

EPSS

13.2%

CVE-2023-37460 Maven

EPSS 2% CVSS 9.8

CRITICAL POC PATCH Act Now

RCE Path Traversal Plexus Archiver +1

NVD GitHub

CVE-2018-1002200 Maven

EPSS 13% CVSS 5.5

MEDIUM POC PATCH THREAT This Month

Path Traversal Debian Red Hat +6

NVD GitHub