Apache

Ivy

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2026-26032

  • EPSS 0.51%
  • Veröffentlicht 15.07.2026 18:49:43
  • Zuletzt bearbeitet 16.07.2026 02:57:40

The PackagerResolver of Apache Ivy is able to download online artifacts and to (re)package them in a format defined by a packager.xml file. This repackaging is done by an Ant script, which is stored in a subdirectory of the configured "buildRoot" dir...

8.2

CVE-2022-46751

  • EPSS 1.86%
  • Veröffentlicht 21.08.2023 07:15:33
  • Zuletzt bearbeitet 13.02.2025 17:15:48

Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2. When Apache Ivy prior to 2.5.2 parse...

7.5

CVE-2022-37866

  • EPSS 1.58%
  • Veröffentlicht 07.11.2022 14:15:12
  • Zuletzt bearbeitet 01.05.2025 21:15:50

When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "pattern" that may include placeholders for artifacts coordinates like the organisation, module or version. If said coordinates con...

9.1

CVE-2022-37865

  • EPSS 1.8%
  • Veröffentlicht 07.11.2022 11:15:10
  • Zuletzt bearbeitet 02.05.2025 19:15:50

With Apache Ivy 2.4.0 an optional packaging attribute has been introduced that allows artifacts to be unpacked on the fly if they used pack200 or zip packaging. For artifacts using the "zip", "jar" or "war" packaging Ivy prior to 2.5.1 doesn't verify...