AZL-81041

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81041.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-81041

Upstream

CVE-2025-67030

Published

2026-03-25T18:16:25Z

Modified

2026-08-30T05:26:50Z

Summary

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5

Details

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

References

https://nvd.nist.gov/vuln/detail/CVE-2025-67030

Affected packages

Azure Linux:3 / plexus-utils

Package

Name: plexus-utils
Purl: pkg:rpm/azure-linux/plexus-utils

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.3.0-5

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81041.json"