Directory traversal vulnerability found in plexus-utils archive management tool

The plexus-utils library, a common component in Java build chains, suffers from a directory traversal vulnerability via the extractFile() function.

Published 5sem1 sourceNotable

Lire en français

≈ 22sSpeed

The fact

Attackers can exploit this flaw to access files outside the target directory during archive extraction.

This vulnerability potentially affects Maven and Gradle projects depending on plexus-utils.

Click the link to read an article on the topic:

GlobalSecurityMag

Explore this topic

GlobalSecurity Vigilance.fr #plexus-utils #traversée de répertoires #extraction

What if you saw the whole news differently?Factae cross-checks hundreds of sources worldwide to keep only the fact, no opinion. Explore the front page.

Follow topic →

Auto-synthesis from 1 media source · identified on June 17, 2026

← Back to home

The fact

Read more

Directory traversal vulnerability discovered in Python NLTK library

Sonatype Nexus Repository Manager hit by XSS vulnerability

Node.js Tar: directory traversal flaw via relative links

Libarchive: Multiple Critical Security Vulnerabilities Found

Code execution flaw in mchange-commons-java library

GnuPG vulnerable to directory traversal via literal data path separators