REDHAT-BUG-2451409: High severity maven/org.codehaus.plexus/plexus-utils vulnerability
Published Mar 25, 2026
·Updated
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Affected Software
1 affected component
maven/org.codehaus.plexus/plexus-utils<6d780b3378829318ba5c2d29547e0012d5b29642
Event History
Mar 25, 2026
Data Sourced
via Red Hat·06:02 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2451409?
The severity of REDHAT-BUG-2451409 is high, rated at 7.
2
What type of vulnerability is REDHAT-BUG-2451409?
REDHAT-BUG-2451409 is a Directory Traversal vulnerability.
3
How do I fix REDHAT-BUG-2451409?
To fix REDHAT-BUG-2451409, update plexus-utils to version 6d780b3378829318ba5c2d29547e0012d5b29642 or later.
4
What can an attacker do with REDHAT-BUG-2451409?
An attacker can execute arbitrary code through the Directory Traversal vulnerability in REDHAT-BUG-2451409.
5
Which software is affected by REDHAT-BUG-2451409?
The affected software for REDHAT-BUG-2451409 is maven/org.codehaus.plexus/plexus-utils.