Known Vulnerabilities for products from Codehaus-plexus
Listed below are 3 of the newest known vulnerabilities associated with the vendor "Codehaus-plexus".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-67030 json | Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3... | Not Provided | 2026-03-25 | 2026-04-01 |
| CVE-2023-37460 json | Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Ar... | 9.8 - CRITICAL | 2023-07-25 | 2023-08-03 |
| CVE-2018-1002200 json | plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (... | 5.5 - MEDIUM | 2018-07-25 | 2023-08-02 |