← Database

CVE-2022-4245

MEDIUM CVSS: 4.3 Published: 2023-09-25 Modified: 2026-06-17

Description

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

Affected Platforms

Redhat Integration Camel KCodehaus-Plexus Plexus-Utils

Weakness Type

CWE-91, CWE-611

References