CVE-2022-4245

CVE-2022-4245 concerns a flaw in codehaus-plexus where, in XmlWriterUtil, the method writeComment fails to sanitize a --> sequence. This allows text in a command string to be interpreted as XML, enabling XML injection. The available connected documents consistently describe this vulnerability...

CVE-2022-4244

CVE-2022-4244 covers a directory traversal flaw in codehaus-codehaus (Plexus-Utils). The vulnerability arises from improper handling of path traversal sequences (../ or absolute paths) that could allow access to arbitrary files on the filesystem. Affected products include IBM Cognos Controller (1...