RHEL 7 : codehaus-plexus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - codehaus-plexus: Directory Traversal CVE-2022-4244 - A flaw was found in codehaus-plexus. The...

CVE-2022-4245

creationtimestamp| type| source ---|---|--- 2023-09-26 00:34:27+00:00| seen| https://t.me/cibsecurity/71014...

com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin (>=1.5.2, <=1.6.40), com.anaptecs.jeaf.generator:jeaf-generator-test-message-constants (>=1.5.13, <=1.6.40) +146 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin =1.5.2, =1.5.13, =4.1.1, =3.1.12, =1.0,...

com.atlassian.maven.plugins:maven-clover2-plugin (>=2.3.1, <=2.4.2), com.intel.analytics.bigdl.core.dist:all (>=0.4.0, <=0.13.0) +192 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.6)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.atlassian.maven.plugins:maven-clover2-plugin =2.3.1, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0...

ch.fortysix:maven-postman-plugin (>=0.1.0, <=0.1.6), com.github.automately:automately-core (>=1.8.6, <=1.8.8) +155 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ch.fortysix:maven-postman-plugin =0.1.0, =1.8.6, =0.0.9, =0.0.9, =0.0.9, =0.0.12, =0.0.9, =0.0....

org.ow2.util.maven:maven-deploymentplan-plugin (>=1.0.34, <=1.0.37), org.ow2.util.maven:maven-jbuilding-plugin (>=1.0.1, <=1.0.37) +7 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.ow2.util.maven:maven-deploymentplan-plugin =1.0.34, =1.0.1, =1.0.31, =1.0.13, =1.0.13,...

app.keyconnect.api:keyconnect-api (1.0.0), app.keyconnect:keyconnect-rippled-api (1.0.0) +298 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - app.keyconnect.api:keyconnect-api 1.0.0 - app.keyconnect:keyconnect-rippled-api 1.0.0 -...

com.agilepirates:mavenium (0.1), com.github.mmarquee:ui-automation (>=0.0.1, <=0.0.2) +120 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.0.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.agilepirates:mavenium 0.1 - com.github.mmarquee:ui-automation =0.0.1, =0.1-alpha-4, =1.2.10...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

au.com.alderaan:eclipselink-staticweave-maven-plugin (>=1.0.0, <=1.0.4), biz.paluch.maven.configurator:configurator-maven-plugin (>=1.0, <=1.0.1) +592 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.1)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - au.com.alderaan:eclipselink-staticweave-maven-plugin =1.0.0, =1.0, =1.0.26, =1.3.2-snapshot,...

org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2022-4245 Source advisory...

br.com.ingenieux.launchify:launchify-core (0.0.1), br.com.ingenieux.launchify:launchify-hashdot (0.0.1) +559 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.5)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - br.com.ingenieux.launchify:launchify-core 0.0.1 - br.com.ingenieux.launchify:launchify-hashdot...

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

UBUNTU-CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

CVE-2022-4245 Codehaus-plexus: xml external entity (xxe) injection

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

CVE-2022-4245 Codehaus-plexus: xml external entity (xxe) injection

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

CVE-2022-4245

CVE-2022-4245 concerns a flaw in codehaus-plexus where, in XmlWriterUtil, the method writeComment fails to sanitize a --&gt; sequence. This allows text in a command string to be interpreted as XML, enabling XML injection. The available connected documents consistently describe this vulnerability...