Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Plexus\-Archiver
(Codehaus\-Plexus)| Repositories | https://github.com/codehaus-plexus/plexus-archiver |
| #Vulnerabilities | 2 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-07-25 | CVE-2023-37460 | Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file creation and possibly remote code execution. When extracting an archive with an entry that already exists in the destination directory as a symbolic link whose target does not exist - the `resolveFile()` function will return the symlink's... | Plexus\-Archiver | 9.8 | ||
| 2018-07-25 | CVE-2018-1002200 | plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. | Plexus\-Archiver, Debian_linux, Enterprise_linux, Enterprise_linux_desktop, Enterprise_linux_workstation | 5.5 |