CVE-2022-4245
1 advisory.
Maven/org.codehaus.plexus:plexus-utils CVE-2022-4245: medium 4.3
codehaus-plexus vulnerable to XML injection
Action: Upgrade org.codehaus.plexus:plexus-utils to 3.0.24 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.24 | - |
Fixed versions
| 3.0.24 |
Sources
- osv: GHSA-jcwr-x25h-x5fh
- https://nvd.nist.gov/vuln/detail/CVE-2022-4245
- https://github.com/codehaus-plexus/plexus-utils/issues/3
- https://github.com/codehaus-plexus/plexus-utils/commit/f933e5e78dc2637e485447ed821fe14904f110de
- https://access.redhat.com/errata/RHSA-2023:2135
- https://access.redhat.com/errata/RHSA-2023:3906
- https://access.redhat.com/security/cve/CVE-2022-4245
- https://bugzilla.redhat.com/show_bug.cgi?id=2149843
- https://github.com/codehaus-plexus/plexus-utils
- https://security.snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-461102
CVE-2022-4245 · published · modified · JSON