The MojoHaus Exec Maven plugin 1.1.1 for Maven allows code execution via a crafted XML document because a configuration element (within a plugin element) can specify an arbitrary program in an executable element (and can also specify arbitrary command-line arguments in an arguments element).
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mojohaus exec maven 1.1.1 |
Vulmon