Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.codehaus.plexus/plexus-utils@3.0.24
purl pkg:maven/org.codehaus.plexus/plexus-utils@3.0.24
Next non-vulnerable version 3.6.1
Latest non-vulnerable version 4.0.3
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-6fmv-xxpf-w3cw
Aliases:
CVE-2025-67030
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in …
3.6.1
Not vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
GHSA-jcwr-x25h-x5fh
codehaus-plexus vulnerable to XML injection A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `-->` … CVE-2022-4245
GHSA-g6ph-x5wf-g337
plexus-codehaus vulnerable to directory traversal A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) … CVE-2022-4244