Vulnerabilities > Pf4J Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-28 | CVE-2023-40826 | Path Traversal vulnerability in Pf4J Project Pf4J An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter. | 7.5 |
| 2023-08-28 | CVE-2023-40827 | Path Traversal vulnerability in Pf4J Project Pf4J An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter. | 7.5 |
| 2023-08-28 | CVE-2023-40828 | Path Traversal vulnerability in Pf4J Project Pf4J An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function. | 7.5 |