Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

codehaus-plexus/plexus-archiver

              master @ a86e3dd
            

Fixes

CVEs

HIGH

Peak severity

66.7%

Coverage

Highlights

Path Traversal: 2 prior fixes. Scrutinize any change in this area.

src/main/java/org/codehaus/plexus/archiver/AbstractUnArchiver.java: most-fixed (2 issues). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Attackers can bypass directory boundaries during extraction by exploiting unresolved symbolic links or weak string-based prefix validations, leading to arbitrary file write outside the designated target folder. This risk is exemplified by CVE-2023-37460 and CVE-2018-1002200.

Insecure Temporary File: Using predictable or overly permissive temporary file generation functions can expose sensitive transit archive data to local users, potentially leading to information disclosure or file-hijacking on shared systems.