Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2016-7057

Good to know:

icon
icon

Date: May 7, 2016

Plexus-utils before 3.0.24 are vulnerable to Directory Traversal

Language: Java

Severity Score

Related Resources (3)

https://github.com/codehaus-plexus/plexus-utils/commit/33a2853df8185b4519b1b8bfae284f03392618ef
https://github.com/codehaus-plexus/plexus-utils/issues/4
https://www.mend.io/vulnerability-database/WS-2016-7057

Severity Score

Weakness Type (CWE)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-22

Top Fix

icon

Upgrade Version

Upgrade to version cromwell - 40;womtool - 53;womtool - 50;fgbio - 0.2.0;fgbio - 0.4.0;maven - 3.5.0;beakerx - no_fix;fiji - 20231211;wdltool - no_fix;pepquery - 2.0.2;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.5.X;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-base:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.2.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.2.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.2.1;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:no_fix;io.hawt:hawtio-maven-indexer:1.4.1;io.hawt:hawtio-maven-indexer:1.5.X;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;org.codehaus.plexus:plexus-utils:3.0.24;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.5.X;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-no-slf4j:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.2.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.5.X;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.2.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:hawtio-default:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.2.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.5.X;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.5.X;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:sample:1.4.1;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:2.0.0;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-custom-app:1.4.31;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.2.1;io.hawt:hawtio-default-offline:1.5.X;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.hawt:hawtio-default-offline:1.4.1;io.fabric8.fab:fab-osgi:1.0.0.redhat-394;io.fabric8.fab:fab-osgi:1.1.0.Beta1;io.fabric8.fab:fab-osgi:1.0.0.redhat-394;org.overlord.sramp:s-ramp-distro-shell:no_fix

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us