VYPR
Medium severity4.3NVD Advisory· Published Sep 25, 2023· Updated Jun 17, 2026

CVE-2022-4245

CVE-2022-4245

Description

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.codehaus.plexus:plexus-utilsMaven
< 3.0.243.0.24

Affected products

31

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.