CVE-2025-67030: Path Traversal
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.3.0-5 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.3.0-4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67030?
CVE-2025-67030 has a critical severity level as it allows an attacker to execute arbitrary code.
How do I fix CVE-2025-67030?
To fix CVE-2025-67030, update plexus-utils to version 6d780b3378829318ba5c2d29547e0012d5b29642 or later.
What products are affected by CVE-2025-67030?
CVE-2025-67030 affects versions of plexus-utils prior to 6d780b3378829318ba5c2d29547e0012d5b29642.
What type of vulnerability is CVE-2025-67030?
CVE-2025-67030 is a Directory Traversal vulnerability in the extractFile method.
Can CVE-2025-67030 be exploited remotely?
Yes, CVE-2025-67030 can be exploited remotely, allowing attackers to execute arbitrary code on the affected system.