CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Plugin Framework for Java (PF4J)

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Plugin Framework for Java PF4J. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-40828 DESCRIPTION: Plugin Framework for Java PF4J coul...

CVE-2023-40828

creationtimestamp| type| source ---|---|--- 2023-08-29 02:20:14+00:00| seen| https://t.me/cibsecurity/69336...

care.better.pf4j:pf4j-kotlin-symbol-processing (>=1.0.0-RC1 <=2.4.0-1.0.5), cn.sliew:carp-dist (>=0.0.1 <=0.0.34) +836 more potentially affected by CVE-2023-40828 via org.pf4j:pf4j (>=2.0.0 <=3.9.0)

org.pf4j:pf4j MAVEN version =2.0.0, =1.0.0-RC1, =0.0.1, =0.0.42, =0.0.63, =0.0.64, =0.0.66, =0.0.63, =0.0.49, =0.0.61, =0.0.61, =0.0.13, =0.0.1, =0.0.33, =0.0.33, =0.0.33, =0.0.34 and more Source cves: CVE-2023-40828 Source advisory: OSV:GHSA-CJ8W-V588-P8WX...

CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function...

CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function...

CVE-2023-40828

PF4J (Plugin Framework for Java) v3.9.0 and earlier is affected by CVE-2023-40828 due to improper input validation in the expandIfZip function of extract, enabling a remote attacker to obtain sensitive information and execute arbitrary code. Exploitation involves crafting an archive with dot-dot ...

CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function...