VendorsCodehaus Plexusplexus-utilsall versions
Vulnerabilities

Codehaus Plexus codehaus-plexus plexus-utils

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
Published 2018-01-03 · Modified
9.8EPSS 0.065
CVE-2025-67030
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Published 2026-03-25 · Modified
8.8EPSS 0.007
CVE-2022-4244
Codehaus-plexus: directory traversal
Published 2023-09-25 · Analyzed
7.5EPSS 0.013
CVE-2022-4245
Codehaus-plexus: xml external entity (xxe) injection
Published 2023-09-25 · Modified
4.3EPSS 0.007