CVE-2022-4245

CVE-2022-4245 concerns a flaw in codehaus-plexus where, in XmlWriterUtil, the method writeComment fails to sanitize a --> sequence. This allows text in a command string to be interpreted as XML, enabling XML injection. The available connected documents consistently describe this vulnerability...