CVE-2023-37460
1 advisory.
Maven/org.codehaus.plexus:plexus-archiver CVE-2023-37460: high 8.1
Arbitrary File Creation in AbstractUnArchiver
Action: Upgrade org.codehaus.plexus:plexus-archiver to 4.8.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.8.0 | - |
Fixed versions
| 4.8.0 |
Sources
- osv: GHSA-wh3p-fphp-9h2m
- https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2m
- https://nvd.nist.gov/vuln/detail/CVE-2023-37460
- https://github.com/codehaus-plexus/plexus-archiver/commit/54759839fbdf85caf8442076f001d5fd64e0dcb2
- https://github.com/codehaus-plexus/plexus-archiver
- https://github.com/codehaus-plexus/plexus-archiver/releases/tag/plexus-archiver-4.8.0
CVE-2023-37460 · published · modified · JSON