A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.codehaus.plexus:plexus-utils(Maven) | 0 | 3.0.24 | N/A |
CVSS Metrics
