Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

directory traversal in org.codehaus.plexus.util.Expand #4

Closed
fweimer opened this issue Sep 21, 2015 · 0 comments
Closed

directory traversal in org.codehaus.plexus.util.Expand #4

fweimer opened this issue Sep 21, 2015 · 0 comments

Comments

@fweimer
Copy link

fweimer commented Sep 21, 2015

org.codehaus.plexus.util.Expand does not guard against directory traversal, but such protection is generally expected from unarchiving tools.

I think the class should just be deprecated and removed because there do not appear to be any users left (not even a test case).
pSub added a commit to red6/dmn-check that referenced this issue Jan 3, 2018
@pSub
Work around vulnerability codehaus-plexus/plexus-utils#4
f8f4020
pSub added a commit to red6/dmn-check that referenced this issue Apr 3, 2018
@pSub
Update maven-plugin-api and remove workaround for codehaus-plexus/ple…
4d95c26 
…xus-utils#4
@cowwoc cowwoc mentioned this issue Feb 10, 2022
Merged
@github-actions github-actions bot mentioned this issue Jan 2, 2024
Closed
@github-actions github-actions bot mentioned this issue Oct 8, 2024
Open
6 tasks
This was referenced Oct 18, 2024
Closed
Closed
Closed
Closed
Closed
Closed
Closed
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@fweimer