CVE-2022-4245: Codehaus-Plexus Plexus-Utils

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

Affected products

• Codehaus-Plexus Plexus-Utils: before 3.0.24 (fixed in 3.0.24)
• Red Hat Integration Camel K: before 1.10.1 (fixed in 1.10.1)

Published 2023-09-25. Last modified 2026-06-17.