Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
Required
User action required
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v3.1
Weakness Type (CWE)
References 5
https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec
cve@mitre.org
https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29…
cve@mitre.org
https://github.com/codehaus-plexus/plexus-utils/issues/294
cve@mitre.org
https://github.com/codehaus-plexus/plexus-utils/pull/295
cve@mitre.org
https://github.com/codehaus-plexus/plexus-utils/pull/296
cve@mitre.org