Pf4j Project Pf4j
4 CVEs affecting Pf4j Project Pf4j. Latest disclosed: 2026-03-25. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-70952 | High | 7.5 | 2026-03-25 | pf4j before 20c2f80 has a path traversal vulnerability in the extract() function of Unzip.java, where improper handling of zip entry names can allow directory… |
CVE-2023-40828 | High | 7.5 | 2023-08-28 | An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the… |
CVE-2023-40827 | High | 7.5 | 2023-08-28 | An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter. |
CVE-2023-40826 | High | 7.5 | 2023-08-28 | An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter. |