NA

CVE-2022-4245

Published: 25/09/2023 Updated: 03/05/2024
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

Vulnerable Product Search on Vulmon Subscribe to Product

codehaus-plexus project codehaus-plexus

redhat integration camel k

Vendor Advisories

Synopsis Important: Red Hat Integration Camel K 1101 release security update Type/Severity Security Advisory: Important Topic Red Hat Integration Camel K 1101 release and security update is now available The purpose of this text-only errata is to inform you about the security issues fixed Red Hat Product Security has rated this update a ...
Description<!----> This CVE is under investigation by Red Hat Product Security ...