Apache Commons Text vulnerabilities

1 known vulnerability affecting apache/commons_text.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2022-42889CRITICALCVSS 9.8ExploitedPoC≥ 1.5, < 1.10.02022-10-13

CVE-2022-42889 [CRITICAL] CWE-94 CVE-2022-42889: Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation. Starting with version 1.5 and continuing through 1.