CVE-2017-1000487

Опубликовано: 03 янв. 2018

Источник: debian

Описание

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

Пакет	Статус	Версия исправления	Релиз	Тип
plexus-utils	fixed	1:1.5.15-5		package
plexus-utils2	fixed	3.0.22-1		package

https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-31522
https://github.com/codehaus-plexus/plexus-utils/commit/b38a1b3a4352303e4312b2bb601a0d7ec6e28f41

CVE-2017-1000487

CVSS3: 9.8

ubuntu

около 8 лет назад

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

CVE-2017-1000487

CVSS3: 7.8

redhat

больше 12 лет назад

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

CVE-2017-1000487

CVSS3: 9.8

nvd

около 8 лет назад

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

GHSA-8vhq-qq4p-grq3

CVSS3: 9.8

github

больше 3 лет назад

OS Command Injection in Plexus-utils

BDU:2022-02758

CVSS3: 9.8

fstec

около 8 лет назад

Уязвимость пакета Plexus-utils платформы расширенной аналитики IBM Netezza Analytics, позволяющая нарушителю выполнить произвольные команды