Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
Metrics
Affected Vendors & Products
References
History
Thu, 10 Oct 2024 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Codehaus-plexus
Codehaus-plexus plexus-utils |
|
CPEs | cpe:2.3:a:codehaus-plexus:plexus-utils:*:*:*:*:*:*:*:* | |
Vendors & Products |
Plexus-utils Project
Plexus-utils Project plexus-utils |
Codehaus-plexus
Codehaus-plexus plexus-utils |
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-01-03T20:00:00
Updated: 2024-08-05T22:00:41.635Z
Reserved: 2018-01-03T00:00:00
Link: CVE-2017-1000487
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-01-03T20:29:00.703
Modified: 2024-11-21T03:04:50.743
Link: CVE-2017-1000487
Redhat