{"action":"Upgrade org.codehaus.plexus:plexus-utils to 3.0.24 or later.","affected":[{"fixed":"3.0.24","introduced":"0"}],"component":"org.codehaus.plexus:plexus-utils","cve_ids":["CVE-2022-4245"],"ecosystem":"Maven","epss":0.00694,"exploited":false,"fixed_versions":["3.0.24"],"ghsa_id":"GHSA-jcwr-x25h-x5fh","id":"tcs_01M5N92M9WFNY5SD66MYWKDDTV","modified_at":"2024-05-03T20:32:52.547057Z","published_at":"2023-09-25T21:30:26Z","references":["https://osv.dev/vulnerability/GHSA-jcwr-x25h-x5fh","https://nvd.nist.gov/vuln/detail/CVE-2022-4245","https://github.com/codehaus-plexus/plexus-utils/issues/3","https://github.com/codehaus-plexus/plexus-utils/commit/f933e5e78dc2637e485447ed821fe14904f110de","https://access.redhat.com/errata/RHSA-2023:2135","https://access.redhat.com/errata/RHSA-2023:3906","https://access.redhat.com/security/cve/CVE-2022-4245","https://bugzilla.redhat.com/show_bug.cgi?id=2149843","https://github.com/codehaus-plexus/plexus-utils","https://security.snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-461102"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-jcwr-x25h-x5fh","url":"https://osv.dev/vulnerability/GHSA-jcwr-x25h-x5fh"}],"summary":"codehaus-plexus vulnerable to XML injection"}