CVE-2017-1000487
03.01.2018, 20:29
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
| Vendor | Product | Version |
|---|---|---|
| codehaus-plexus | plexus-utils | 𝑥 < 3.0.16 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| plexus-utils |
| ||||||||||||
| plexus-utils2 |
|
References