Security Advisory

CVE-2022-4245

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-09-25 19:20:57
Last updated 2024-08-03 01:34:49
Assigner redhat
State PUBLISHED

Description

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.