Lucene search

K

Pf4J Security Vulnerabilities

cve
cve

CVE-2023-40826

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter.

7.5CVSS

7.6AI Score

0.003EPSS

2023-08-28 10:15 PM
80
cve
cve

CVE-2023-40827

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter.

7.5CVSS

7.6AI Score

0.003EPSS

2023-08-28 10:15 PM
85
cve
cve

CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function.

7.5CVSS

7.6AI Score

0.005EPSS

2023-08-28 10:15 PM
18