4.3 Medium

CVE-2022-4245 A flaw was found in codehaus-plexus

Description

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

Affected products and versions

Product	Affected versions	Fixed in
RHINT Camel-K-1.10.1	Versions not published
RHPAM 7.13.1 async	Versions not published
A-MQ Clients 2	Versions not published
Red Hat A-MQ Online	Versions not published
Red Hat build of Apache Camel for Spring Boot	Versions not published
Red Hat build of Quarkus	Versions not published
Red Hat Data Grid 8	Versions not published
Red Hat Decision Manager 7	Versions not published
Red Hat Enterprise Linux 7	Versions not published

Show the 20 other branches

Product	Affected versions	Fixed in
Red Hat Enterprise Linux 8	Versions not published
Red Hat Enterprise Linux 9	Versions not published
Red Hat Integration Camel Quarkus	Versions not published
Red Hat Integration Change Data Capture	Versions not published
Red Hat Integration Service Registry	Versions not published
Red Hat JBoss A-MQ 7	Versions not published
Red Hat JBoss Data Grid 7	Versions not published
Red Hat JBoss Enterprise Application Platform 6	Versions not published
Red Hat JBoss Enterprise Application Platform 7	Versions not published
Red Hat JBoss Enterprise Application Platform Expansion Pack	Versions not published
Red Hat JBoss Fuse 6	Versions not published
Red Hat JBoss Fuse 7	Versions not published
Red Hat JBoss Fuse Service Works 6	Versions not published
Red Hat JBoss Web Server 3	Versions not published
Red Hat JBoss Web Server 5	Versions not published
Red Hat OpenShift Application Runtimes	Versions not published
Red Hat Process Automation 7	Versions not published
Red Hat Single Sign-On 7	Versions not published
Red Hat Software Collections	Versions not published
Red Hat support for Spring Boot	Versions not published