Plexus-utils vulnerabilities

2 known vulnerabilities in Plexus-utils from Codehaus-plexus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Red Hat build of Apache Camel 4.18.1 for…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-67030Mar 25, 2026Red Hat

  Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

• 7.5 High severity

  RHINT Camel-K-1.10.1: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-4244Sep 25, 2023Red HatEPSS 1.35%

  A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by us