{"action":"Upgrade org.codehaus.plexus:plexus-archiver to 4.8.0 or later.","affected":[{"fixed":"4.8.0","introduced":"0"}],"component":"org.codehaus.plexus:plexus-archiver","cve_ids":["CVE-2023-37460"],"ecosystem":"Maven","epss":0.02482,"exploited":false,"fixed_versions":["4.8.0"],"ghsa_id":"GHSA-wh3p-fphp-9h2m","id":"tcs_01M5N9GF873RDV7YQ82WRPPRGJ","modified_at":"2026-09-10T03:49:57.364512865Z","published_at":"2023-07-25T17:20:43Z","references":["https://osv.dev/vulnerability/GHSA-wh3p-fphp-9h2m","https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2m","https://nvd.nist.gov/vuln/detail/CVE-2023-37460","https://github.com/codehaus-plexus/plexus-archiver/commit/54759839fbdf85caf8442076f001d5fd64e0dcb2","https://github.com/codehaus-plexus/plexus-archiver","https://github.com/codehaus-plexus/plexus-archiver/releases/tag/plexus-archiver-4.8.0"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-wh3p-fphp-9h2m","url":"https://osv.dev/vulnerability/GHSA-wh3p-fphp-9h2m"}],"summary":"Arbitrary File Creation in AbstractUnArchiver"}