Approved changes feed: RSS · Atom

cpe:2.3:a:mojohaus:exec_maven:1.1.1:*:*:*:*:maven:*:*

part: a version: 1.1.1 update: *

VendorMojohaus (d0307b06-b31b-5652-aaf9-2aa338bc4b46)
ProductExec Maven (1ec86628-2a55-5760-a6e9-031c7628b581)
Edition*
Language*
Software edition*
Target softwaremaven
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/exec-maven-plugin purl2cpe 2026-06-01 10:14:40.613187
pkg:deb/ubuntu/exec-maven-plugin purl2cpe 2026-06-01 10:14:40.613190
pkg:github/mojohaus/exec-maven-plugin purl2cpe 2026-06-01 10:14:40.613193
pkg:maven/org.codehaus.mojo/exec-maven-plugin purl2cpe 2026-06-01 10:14:40.613196
pkg:rpm/centos/exec-maven-plugin purl2cpe 2026-06-01 10:14:40.613198
pkg:rpm/fedora/exec-maven-plugin purl2cpe 2026-06-01 10:14:40.613201
pkg:rpm/opensuse/exec-maven-plugin purl2cpe 2026-06-01 10:14:40.613204

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-20343 vulnerable 2026-06-08 05:13:40.459712 Details available
The MojoHaus Exec Maven plugin 1.1.1 for Maven allows code execution via a crafted XML document because a configuration element (within a plugin element) can specify an arbitrary program in an executable element (and can also specify arbitrary command-line arguments in an arguments element).
Published: 2020-01-06T13:46:30.000Z
Updated: 2024-08-05T02:39:09.987Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.