Uploaded image for project: 'MathJax Macro'
  1. MathJax Macro
  2. MATHJAX-24

Security vulnerability caused by org.codehaus.plexus:plexus-archiver/4.5.0 dependency

    XMLWordPrintable

Details

    • Bug
    • Resolution: Solved By
    • Critical
    • 1.1.6
    • 1.1.2
    • Windows 11 Pro, Chrome 117, using a local instance of XWiki 15.5.2 on Jetty/HSQLDB
    • Unknown

    Description

      Steps to reproduce

      1. Go to Administer Wiki > Extensions > Extensions
      2. Install MathJax Macro 1.1.2 through Extensions Manager
      3. Go to Administer Wiki > Extensions > Security Vulnerabilities
      4. Insert a Scan Delay number under the Configuration section (e.g. 1)
      5. Click 'Save'

      Expected results

      No security vulnerabilities are found.

      Actual results

      A security vulnerability is found having the Extension Id:

      org.codehaus.plexus:plexus-archiver/4.5.0

      Here is the link to the CVE ID: https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2m

      Attachments

        Issue Links

          Activity

            People

              tmortagne Thomas Mortagne
              iandriuta Ilie Andriuta
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: