In breve
- CVE-2023-40828 è una vulnerabilità ALTO (CVSS 7.5) che riguarda org.pf4j:pf4j, pf4j (pf4j project).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 73.9% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
| Package | Affected versions | Patched versions |
|---|
| org.pf4j:pf4j Maven | ≤ 3.9.0
| No fix yet |
| pf4j | ≤ 3.9.0
| No fix yet |
Description
An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function.
NVD description
An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free