NetSight
IP …
high8.8

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.

Impact

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.codehaus.plexus:plexus-utils>= 4.0.0, < 4.0.34.0.3

Affected products

VendorProductAffected versions
Codehaus-PlexusPlexus-Utils
before 3.6.1
from 4.0.0 before 4.0.3

Weakness classification

CWE-22

References