An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/pf4j/pf4j/issues/536 |
![]() ![]() |
History
Wed, 02 Oct 2024 16:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: mitre
Published: 2023-08-28T00:00:00
Updated: 2024-10-02T15:21:54.380Z
Reserved: 2023-08-22T00:00:00
Link: CVE-2023-40826

Updated: 2024-08-02T18:46:11.105Z

Status : Modified
Published: 2023-08-28T22:15:09.433
Modified: 2024-11-21T08:20:10.783
Link: CVE-2023-40826

No data.