CVE-2017-1000487: Improper Neutralization of Special Elements used in an OS Command

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings...

PT-2018-3791 · Apache · Plexus-Utils

Name of the Vulnerable Software and Affected Versions: Plexus-utils versions prior to 3.0.16 Description: The issue arises from the incorrect processing of double quoted strings, leading to command injection. This could allow a remote attacker to execute arbitrary commands. Recommendations: For...