Download
| Alert*
DSA-4149-1 plexus-utils2 -- plexus-utils2
Charles Duffy discovered that the Commandline class in the utilities for the Plexus framework performs insufficient quoting of double-encoded strings, which could result in the execution of arbitrary shell commands.
|