-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper path sanitization when resolving artifact storage locations. The primary vulnerable function is DefaultRepositoryCacheManager.getArchivePathInCache which handles pattern substitution with user-controlled coordinates. FileUtil.resolveFile is a secondary candidate as it's commonly involved in path resolution operations. These functions would appear in stack traces when processing malicious coordinates containing path traversal sequences. The high confidence for DefaultRepositoryCacheManager comes from its direct role in cache path construction, while FileUtil.resolveFile gets medium confidence as a supporting utility.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.ivy:ivy | maven | >= 2.0.0, < 2.5.1 | 2.5.1 |
JavaJavaKEV Misses 88% of Exploited CVEs- Get the report