Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.ant:ant

5 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 1 high
Dependents
372
Registry
Maven Central

Advisories 5

  • Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write

    Affected: from 1.2, fixed in 1.10.18.

  • Apache Ant ZIP, and ZIP based, archive denial of service vulerability

    Affected: from 1.9.0, fixed in 1.9.16; from 1.10.0, fixed in 1.10.11.

  • Apache Ant TAR archive denial of service vulnerability

    Affected: fixed in 1.9.16; from 1.10.0, fixed in 1.10.11.

  • As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was al

    Affected: fixed in 1.10.9.

  • Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir…

    Affected: from 1.1, fixed in 1.9.15; from 1.10.0, fixed in 1.10.8.