Product

org.apache.maven.plugins/maven-archetype-plugin vulnerabilities

1 published CVE affecting org.apache.maven.plugins/maven-archetype-plugin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.apache.maven.plugins/maven-archetype-plugin CVEs

Newest publication first

CVE-2024-47197 Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentials
Published 2024-09-26

HighCVSS 7.5 EPSS 0.84%

Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin. This issue affects Maven Archetype Plugin: from 3.2.1 before 3.3.0. Users are recommended to upgrade to version 3.3.0, which fixes the is...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.apache.maven.plugins/maven-archetype-plugin vulnerabilities

Latest org.apache.maven.plugins/maven-archetype-plugin CVEs

CVE-2024-47197 Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentials