What’s Vulnerable › Vulnerabilities

CVE-2022-4244: Codehaus-plexus: directory traversal

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-25 · updated 2026-06-17
• Weakness: CWE-22

Description

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

Affected products

• codehaus-plexus Plexus-Utils: before 3.0.24 — fixed in 3.0.24
• RedHat Integration Camel K: before 1.10.1 — fixed in 1.10.1

How to fix

Upgrade to a fixed version: codehaus-plexus Plexus-Utils 3.0.24; RedHat Integration Camel K 1.10.1. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/errata/RHSA-2023:2135
• https://access.redhat.com/errata/RHSA-2023:3906
• https://access.redhat.com/security/cve/CVE-2022-4244
• https://bugzilla.redhat.com/show_bug.cgi?id=2149841
• https://access.redhat.com/errata/RHSA-2023:2135
• https://access.redhat.com/errata/RHSA-2023:3906
• https://access.redhat.com/security/cve/CVE-2022-4244
• https://bugzilla.redhat.com/show_bug.cgi?id=2149841

Get alerted when CVE-2022-4244 or the next vulnerability affects your stack