com.browserstack:browserstack-java-sdk (>=1.0.1, <=1.0.6), com.eclipsesource.tycho.karaf.bridge:kar-packager (>=0.2.0, <=0.6.0) +11 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.5.10)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.browserstack:browserstack-java-sdk =1.0.1, =0.2.0, =0.9, =0.1, =0.2.1, =0.6.1, =2.2, =1.16...

com.anasoft.os:m2st-doxia-macros (2.0), com.soebes.maven.plugins.dmg:doxygen-maven-plugin (1.0.1) +54 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.5.7)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.anasoft.os:m2st-doxia-macros 2.0 - com.soebes.maven.plugins.dmg:doxygen-maven-plugin 1.0.1 ...

co.actioniq.thirdparty.com.twitter:scrooge-generator_2.10 (>=3.17.0-fda97c3c64755e87643b4700e3b9ac136f24e79d, <=3.17.0-4232bc888d6b09f0bf41930956b39dd8f398d96f), co.actioniq.thirdparty.com.twitter:scrooge-linter_2.10 (>=3.17.0-fda97c3c64755e87643b4700e3b9ac136f24e79d, <=3.17.0-4232bc888d6b09f0bf41930956b39dd8f398d96f) +87 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.5.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - co.actioniq.thirdparty.com.twitter:scrooge-generator2.10...

com.realrunners:scalate-maven-plugin_2.13 (0.0.4), com.stephenn:scalate-maven-plugin_2.12 (>=0.0.1, <=0.0.2) +15 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (2.0.2)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.realrunners:scalate-maven-plugin2.13 0.0.4 - com.stephenn:scalate-maven-plugin2.12 =0.0.1,...

Plexus-Utils has a Directory Traversal vulnerability in its extractFile method

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

DEBIAN-CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

AZL-81041 CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

UBUNTU-CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

Plexus-Utils security vulnerabilities

Plexus-Utils is a general-purpose utility program developed by Plexus. This program is primarily used to simplify the handling of strings, files, command lines, and XML data. Versions of Plexus-Utils prior to 20c2f80 contained security vulnerabilities. These vulnerabilities stemmed from the extra...

CVE-2025-67030: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

aero.albers.osmbse:mdzip-process-sources-maven-plugin (0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (0.0.1) +17837 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.6.0)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =1.9.0, =1.9.0, =1.9.0, =0.1, =0.1.0, =0.0.1, =0.0.6, =0.1.10, =0.1.3, =0.0.1, =0.0.1, =0.2.0, =0.2.11 and more Source cves: CVE-2025-67030 Source advisory: SNYK:JAVA-ORGCODEHAUSPLEXUS-15766699...

aero.albers.osmbse:mdzip-process-sources-maven-plugin (0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (0.0.1) +24312 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=1.0.4, <=3.6.0)

org.codehaus.plexus:plexus-utils MAVEN version =1.0.4, =1.9.0, =1.9.0, =1.9.0, =0.1, =0.1.0, =0.0.1, =0.0.2 - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 - ai.mattmann.mnemosyne:cas-pge 1.11.0 - ai.mattmann.mnemosyne:cas-product 1.11.0 -...

at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1, <=9.1.3.2), au.com.acegi:xml-format-maven-plugin (>=4.0.1, <=4.1.0) +2055 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=4.0.0, <=4.0.2)

org.codehaus.plexus:plexus-utils MAVEN version =4.0.0, =9.1.1, =4.0.1, =0.0.1, =0.0.9, =0.4.0, =0.0.0, =1.9.2, =1.0.0-m5, =1.0.0-m6, =1.0.0-m1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =1.0.0-m10 and more Source cves: CVE-2025-67030 Source advisory: MEND:CVE-2025-67030...

at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1, <=9.1.3.2), au.com.acegi:xml-format-maven-plugin (>=4.0.1, <=4.1.0) +2055 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=4.0.0, <=4.0.2)

org.codehaus.plexus:plexus-utils MAVEN version =4.0.0, =9.1.1, =4.0.1, =0.0.1, =0.0.9, =0.4.0, =0.0.0, =1.9.2, =1.0.0-m5, =1.0.0-m6, =1.0.0-m1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =1.0.0-m10 and more Source cves: CVE-2025-67030 Source advisory: SNYK:JAVA-ORGCODEHAUSPLEXUS-15766699...

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

Plexus-utils security vulnerabilities

Plexus-utils is a general-purpose utility developed by Plexus Open Source. This program is primarily used to simplify the handling of strings, files, command lines, XML, etc. A security vulnerability existed in Plexus-utils 6d780b3378829318ba5c2d29547e0012d5b29642 and earlier versions. This...

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2025-67030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus- utils before 6d780b3378829318ba5c2d29547e0012d5b29642...