Directory traversal vulnerability found in plexus-utils archive management tool

The plexus-utils library, a common component in Java build chains, suffers from a directory traversal vulnerability via the extractFile() function.

Published 13sem1 sourceNotableupdated 5sem

Lire en français

≈ 22sSpeed

The fact

Attackers can exploit this flaw to access files outside the target directory during archive extraction.

This vulnerability potentially affects Maven and Gradle projects depending on plexus-utils.

Click the link to read an article on the topic:

GlobalSecurityMag

Explore this topic

GlobalSecurity #plexus-utils #traversée de répertoires #extraction

What if you saw the whole news differently?Factae cross-checks hundreds of sources worldwide to keep only the fact, no opinion. Explore the front page.

Follow topic →

Auto-synthesis from 1 media source · identified on June 17, 2026

← Back to home

The fact

Read more

Attackers target Rust developers with malicious job interviews

Google fined $462 million for data violation

ShinyHunters targets cybercriminal group Cl0p

Google confirms: its Gemini AI hacked three companies

Fake LastPass installers: Kernel-level malware disables 145 security tools

Malware campaign uses steganography in PNG files