CVE-2023-37460

Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file creation and possibly remote code execution. When extracting an archive with an entry that already exists in the destination directory as a symbolic link whose target does not exist - the `resolveFile()` function will return the symlink's source instead of its target, which will pass the verification that ensures the file will not be extracted outside of the destination directory. Later `Files.newOutputStream()`, that follows symlinks by default, will actually write the entry's content to the symlink's target. Whoever uses plexus archiver to extract an untrusted archive is vulnerable to an arbitrary file creation and possibly remote code execution. Version 4.8.0 contains a patch for this issue.

• CWE-22
• CWE-61

• https://github.com/codehaus-plexus/plexus-archiver/commit/54759839fbdf85caf8442076f001d5fd64e0dcb2Patch
• https://github.com/codehaus-plexus/plexus-archiver/releases/tag/plexus-archiver-4.8.0Release Notes
• https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2mExploit, Vendor Advisory
• https://github.com/codehaus-plexus/plexus-archiver/commit/54759839fbdf85caf8442076f001d5fd64e0dcb2Patch
• https://github.com/codehaus-plexus/plexus-archiver/releases/tag/plexus-archiver-4.8.0Release Notes
• https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2mExploit, Vendor Advisory

Published

Jul 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37454An issue was discovered in the Linux kernel through 6.4.2. A…5.5
• CVE-2023-37455The permission request prompt from the site in the backgroun…5.4
• CVE-2023-37456The session restore helper crashed whenever there was no par…6.5
• CVE-2023-37457Asterisk is an open source private branch exchange and telep…8.2
• CVE-2023-37459Contiki-NG is an operating system for internet-of-things dev…5.3
• CVE-2023-3746The ActivityPub WordPress plugin before 1.0.0 does not sanit…5.4
• CVE-2023-37461Metersphere is an opensource testing framework. Files upload…9.8
• CVE-2023-37462XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-37463cmark-gfm is an extended version of the C reference implemen…7.5
• CVE-2023-37464OpenIDC/cjose is a C library implementing the Javascript Obj…7.5
• CVE-2023-37466vm2 is an advanced vm/sandbox for Node.js. The library conta…10
• CVE-2023-37467Discourse is an open source discussion platform. Prior to ve…5.4