CVE-2017-1000487

CRITICAL9.8EPSS 7.8%

OS Command Injection in Plexus-utils

Published: 5/13/2022Modified: 4/28/2026

Description

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

Affected packages (6)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (18)