RHEL 7 : codehaus-plexus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - codehaus-plexus: Directory Traversal CVE-2022-4244 - A flaw was found in codehaus-plexus. The...

CVE-2022-4245

creationtimestamp| type| source ---|---|--- 2023-09-26 00:34:27+00:00| seen| https://t.me/cibsecurity/71014...

ch.fortysix:maven-postman-plugin (>=0.1.0, <=0.1.6), com.github.automately:automately-core (>=1.8.6, <=1.8.8) +155 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ch.fortysix:maven-postman-plugin =0.1.0, =1.8.6, =0.0.9, =0.0.9, =0.0.9, =0.0.12, =0.0.9, =0.0....

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

biz.aqute.bnd:biz.aqute.bnd.maven (>=4.3.0, <=5.3.0), com.aerse.maven:apt-maven-plugin (>=1.19, <=1.20) +356 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.aqute.bnd:biz.aqute.bnd.maven =4.3.0, =1.19, =1.0, =2.0.0, =1.4.3, =1.4.3, =1.11.0, =1.11.0...

org.apache.continuum:continuum-api (>=1.3.4, <=1.4.2), org.apache.continuum:continuum-artifact-manager (1.4.2) +30 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.11)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.continuum:continuum-api =1.3.4, =1.3.4, =1.3.4, =1.3.4, =1.4.1, =1.3.4, =1.3.4,...

org.ow2.util.maven:maven-deploymentplan-plugin (>=1.0.34, <=1.0.37), org.ow2.util.maven:maven-jbuilding-plugin (>=1.0.1, <=1.0.37) +7 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.ow2.util.maven:maven-deploymentplan-plugin =1.0.34, =1.0.1, =1.0.31, =1.0.13, =1.0.13,...

com.atlassian.maven.plugins:maven-clover2-plugin (>=2.3.1, <=2.4.2), com.intel.analytics.bigdl.core.dist:all (>=0.4.0, <=0.13.0) +192 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.6)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.atlassian.maven.plugins:maven-clover2-plugin =2.3.1, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0...

app.keyconnect.api:keyconnect-api (1.0.0), app.keyconnect:keyconnect-rippled-api (1.0.0) +298 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - app.keyconnect.api:keyconnect-api 1.0.0 - app.keyconnect:keyconnect-rippled-api 1.0.0 -...

com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin (>=1.5.2, <=1.6.40), com.anaptecs.jeaf.generator:jeaf-generator-test-message-constants (>=1.5.13, <=1.6.40) +146 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin =1.5.2, =1.5.13, =4.1.1, =3.1.12, =1.0,...

ai.rev.speechtotext:revai-java-sdk-speechtotext (>=1.0.0, <=1.4.0), ai.rev:revai-java-sdk (>=2.1.0, <=2.5.0) +564 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.0.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ai.rev.speechtotext:revai-java-sdk-speechtotext =1.0.0, =2.1.0, =1.0, =0.1-1, =1.0.0, =1.0.0,...

org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2022-4245 Source advisory...

com.browserstack:browserstack-java-sdk (>=1.0.1, <=1.0.6), com.eclipsesource.tycho.karaf.bridge:kar-packager (>=0.2.0, <=0.6.0) +11 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.10)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.browserstack:browserstack-java-sdk =1.0.1, =0.2.0, =0.9, =0.1, =0.2.1, =0.6.1, =2.2, =1.16...

br.com.ingenieux.launchify:launchify-core (0.0.1), br.com.ingenieux.launchify:launchify-hashdot (0.0.1) +559 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.5)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - br.com.ingenieux.launchify:launchify-core 0.0.1 - br.com.ingenieux.launchify:launchify-hashdot...

com.agilepirates:mavenium (0.1), com.github.mmarquee:ui-automation (>=0.0.1, <=0.0.2) +120 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.0.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.agilepirates:mavenium 0.1 - com.github.mmarquee:ui-automation =0.0.1, =0.1-alpha-4, =1.2.10...

au.com.alderaan:eclipselink-staticweave-maven-plugin (>=1.0.0, <=1.0.4), biz.paluch.maven.configurator:configurator-maven-plugin (>=1.0, <=1.0.1) +592 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.1)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - au.com.alderaan:eclipselink-staticweave-maven-plugin =1.0.0, =1.0, =1.0.26, =1.3.2-snapshot,...

asia.redact.bracket.properties:pcompiler-maven-plugin (1.0.0), at.craftworks.tools.maven:jooq-codegen-postgres-maven-plugin (0.0.3) +1167 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.5.15)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - asia.redact.bracket.properties:pcompiler-maven-plugin 1.0.0 -...

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

UBUNTU-CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...