Към съдържанието
Търсене

CVE-2025-67030: обхождане на път

8.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и след действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Засегнати продукти

  • n/a n/a: n/a
  • Red Hat Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14
  • Red Hat Red Hat build of Quarkus 3.20.6
  • Red Hat Red Hat build of Quarkus 3.27.3
  • Red Hat Red Hat Enterprise Linux 10: 0:3.5.1-9.el10_2 преди *
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:3.5.1-8.el10_0.1 преди *
  • Red Hat Red Hat Enterprise Linux 8: 8100020260520141024.b249b32d преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 8080020260615155417.a1d5b3e2 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 8080020260615155417.a1d5b3e2 преди *
  • Red Hat Red Hat Enterprise Linux 9: 9080020260520135357.470dcefd преди *
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:3.3.0-10.el9_2.2 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 0:3.3.0-10.el9_4.2 преди *
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:3.3.0-13.el9_6.1 преди *
  • Red Hat Red Hat JBoss Enterprise Application Platform 8.1.7.GA: 3.6.1.redhat-00001 преди *
  • Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8: 0:2.40.0-6.redhat_00012.1.el8eap преди *
  • Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9: 0:2.40.0-6.redhat_00012.1.el9eap преди *
  • Red Hat OpenShift Developer Tools and Services 4.12: 1786628667 преди *
  • Red Hat OpenShift Developer Tools and Services 4.13: 1786628681 преди *
  • Red Hat OpenShift Developer Tools and Services 4.14: 1786533561 преди *
  • Red Hat OpenShift Developer Tools and Services 4.15: 1786533565 преди *
  • Red Hat OpenShift Developer Tools and Services 4.16: 1787125166 преди *
  • Red Hat OpenShift Developer Tools and Services 4.17: 1787124635 преди *
  • Red Hat OpenShift Developer Tools and Services 4.18: 1787125069 преди *
  • Red Hat OpenShift Developer Tools and Services 4.19: 1787124632 преди *
  • Red Hat OpenShift Developer Tools and Services 4.20: 1787124925 преди *
  • Red Hat OpenShift Developer Tools and Services 4.21: 1787125311 преди *
  • Red Hat OpenShift Developer Tools and Services 4.22: 1787124779 преди *
  • Red Hat Red Hat OpenShift AI 2.25: 1788198681 преди *
  • Red Hat Cryostat 4
  • Red Hat OpenShift Developer Tools and Services
  • Red Hat OpenShift Serverless
  • Red Hat Red Hat AMQ Broker 7
  • Red Hat Red Hat AMQ Clients
  • Red Hat Red Hat build of Apicurio Registry 2
  • Red Hat Red Hat build of Apicurio Registry 3
  • Red Hat Red Hat build of Debezium 3
  • Red Hat Red Hat build of Quarkus Native builder
  • Red Hat Red Hat Data Grid 8
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Fuse 7
  • Red Hat Red Hat JBoss Core Services
  • Red Hat Red Hat JBoss Enterprise Application Platform 7
  • Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
  • Red Hat Red Hat JBoss Web Server 5
  • Red Hat Red Hat JBoss Web Server 6
  • Red Hat Red Hat OpenShift AI (RHOAI)
  • Red Hat Red Hat Process Automation 7
  • Red Hat Red Hat Satellite 6
  • Red Hat Red Hat Single Sign-On 7
  • Red Hat streams for Apache Kafka 2
  • Red Hat streams for Apache Kafka 3

Вид слабост

История

  • 25 март 2026 Публикувано

Други уязвимости в n/a n/a

Първоизточници

CVE-2025-67030: обхождане на път | freedomonline.bg