Skip to content
fr Sign in
8.8 High

CVE-2025-67030 Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…

Description

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Affected products and versions

Product Affected versions Fixed in
n/a Versions not published
Red Hat JBoss EAP 8.1 for RHEL 8 Versions not published
Red Hat JBoss EAP 8.1 for RHEL 9 Versions not published
Red Hat JBoss Enterprise Application Platform 8.1 Versions not published
Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14 Versions not published
Red Hat build of Quarkus 3.20.6 Versions not published
Red Hat build of Quarkus 3.27.3 Versions not published
OpenShift Developer Tools and Services Versions not published
OpenShift Serverless Versions not published
Show the 56 other branches
Product Affected versions Fixed in
Red Hat build of Apicurio Registry 2 Versions not published
Red Hat build of Apicurio Registry 3 Versions not published
Red Hat build of Debezium 3 Versions not published
Red Hat Data Grid 8 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 8100020260520141124.88 earliest → < 8100020260520141124.88f2bc72 8100020260520141124.88f2bc72
Red Hat Enterprise Linux 9 Versions not published
Red Hat Fuse 7 Versions not published
Red Hat JBoss Enterprise Application Platform 7 Versions not published
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat Single Sign-On 7 Versions not published
streams for Apache Kafka 2 Versions not published
Cryostat 4 Versions not published
Red Hat AMQ Broker 7 Versions not published
Red Hat AMQ Clients Versions not published
Red Hat build of Quarkus Native builder Versions not published
Red Hat JBoss Core Services Versions not published
Red Hat JBoss Web Server 5 Versions not published
Red Hat JBoss Web Server 6 Versions not published
Red Hat Process Automation 7 Versions not published
Red Hat Satellite 6 Versions not published
streams for Apache Kafka 3 Versions not published
Red Hat Enterprise Linux AppStream EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.2) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.4) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.6) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Red Hat Enterprise Linux AppStream (v. 9) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) Versions not published
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020260615155417 earliest → < 8080020260615155417.a1d5b3e2 8080020260615155417.a1d5b3e2
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020260615155417 earliest → < 8080020260615155417.a1d5b3e2 8080020260615155417.a1d5b3e2
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.6 Extended Update Support 9060020260612145814.470 earliest → < 9060020260612145814.470dcefd 9060020260612145814.470dcefd
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 Versions not published
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 Versions not published
OpenShift Developer Tools and Services 4.12 1786628667 earliest → < 1786628667 1786628667
OpenShift Developer Tools and Services 4.13 1786628681 earliest → < 1786628681 1786628681
OpenShift Developer Tools and Services 4.14 1786533561 earliest → < 1786533561 1786533561
OpenShift Developer Tools and Services 4.15 1786533565 earliest → < 1786533565 1786533565
OpenShift Developer Tools and Services 4.16 1787125166 earliest → < 1787125166 1787125166
OpenShift Developer Tools and Services 4.17 1787124635 earliest → < 1787124635 1787124635
OpenShift Developer Tools and Services 4.18 1787125069 earliest → < 1787125069 1787125069
OpenShift Developer Tools and Services 4.19 1787124632 earliest → < 1787124632 1787124632
OpenShift Developer Tools and Services 4.20 1787124925 earliest → < 1787124925 1787124925
OpenShift Developer Tools and Services 4.21 1787125311 earliest → < 1787125311 1787125311
OpenShift Developer Tools and Services 4.22 1787124779 earliest → < 1787124779 1787124779
Red Hat OpenShift AI 2.25 1788198681 earliest → < 1788198681 1788198681
Red Hat JBoss Enterprise Application Platform 8.1.7.GA 3.6 earliest → < 3.6.1.redhat-00001 3.6.1.redhat-00001

References

Timeline

  1. Published
  2. Last modified

Other CVEs of n/a

The 144658 CVEs of n/a →
CVE-2026-106713 An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the… Not rated CVE-2026-106715 NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin… Not rated CVE-2026-106714 Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it… Not rated CVE-2026-106716 ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep… Not rated
Track this CVE