Apache Software Foundation Apache Commons Text vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_commons_text.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2022-42889CRITICALCVSS 9.8ExploitedPoC≥ unspecified, ≤ 1.9≥ 1.5, < Apache Commons Text*2022-10-13

CVE-2022-42889 [CRITICAL] CWE-94 CVE-2022-42889: Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation. Starting with version 1.5 and continuing through 1.