Arbitrary Code Execution in Apache Commons Text - CVE-2022-42889

Arbitrary Code Execution in Apache Commons Text - CVE-2022-42889

CVEs

9.8 Critical Severity

Apps

CT
*.*
1.10.0.-
1.10.0.RC1
1.6.-
1.6.RC1
1.7.RC1
1.7.-
1.3.-
1.3.RC1
1.1.-
*.*
7.5.0.-
7.5.0.UP1
7.5.0.UP2
7.5.0.UP3
7.5.0.UP4
B
BluexpNetapp
-.*

Screenshots from the blog posts

blog-posts/images/cladx73mi6r2o0koid0g8b4oq.jpgblog-posts/images/cladx73mi6r2o0koid0g8b4oq.jpg

Summary

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded

Description

Total vcoins

11.3K

Comments (0)