Msrc Azl3 Javapackages-Bootstrap 1.5.0-4 On Azure Linux 3.0 vulnerabilities

3 known vulnerabilities affecting msrc/azl3_javapackages-bootstrap_1.5.0-4_on_azure_linux_3.0.

Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM2

Vulnerabilities

Page 1 of 1
CVE-2023-37460CRITICALCVSS 9.82023-07-11
CVE-2023-37460 [HIGH] CWE-22 Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of
msrc
CVE-2021-36374MEDIUMCVSS 5.52021-07-13
CVE-2021-36374 [MEDIUM] CWE-130 Apache Ant ZIP and ZIP based archive denial of service vulerability Apache Ant ZIP and ZIP based archive denial of service vulerability FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open sou
msrc
CVE-2021-36373MEDIUMCVSS 5.52021-07-13
CVE-2021-36373 [MEDIUM] CWE-130 Apache Ant TAR archive denial of service vulnerability Apache Ant TAR archive denial of service vulnerability FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which t
msrc