News

cisotimes2y
How To Detect And Fix The "Text4Shell" Vulnerability - The CISO Times
How to check if you are vulnerable to the Text4Shell vulnerability. To be vulnerable, you must: Use Apache Commons Text version 1.5-1.9 inclusive; Have code using the StringSubstitutor class with ...
Security Boulevard2y
Apache Commons Text vulnerability CVE-2022-42889
This vulnerability allows remote code execution (RCE) in Apache Commons Text. It affects version numbers 1.5-1.9, and an upgrade to Apache Commons Text 1.10.0 disables the problem by default. Apache ...
Bleeping Computer2y
Apache Commons Text RCE flaw — Keep calm and patch away - BleepingComputer
Apache Commons Text is a popular open-source Java library with an "interpolation system" that allows developers to modify, decode, generate, and escape strings based on inputted string lookups.
Security Boulevard2y
Security Advisory: Apache Commons Text Remote Code Execution Vulnerability (CVE-2022-42889)
As per the advisory this vulnerability exists in Apache Commons Text version 1.5 through 1.9. This vulnerability, CVE-2022-42889 is popularly referred to as “Text4Shell” or “Act4Shell”. What is the ...
Computing2y
Apache Commons Text vulnerability not as serious as Log4Shell, researchers say - Computing
Apache Commons Text versions 1.5 through 1.9 are vulnerable to the CVE-2022-42889, and the flaw has been addressed in Commons Text version 1.10.0.
Computer Weekly2y
Apache vulnerability a risk, but not as widespread as Log4Shell
Version 1.10.0 of Apache Commons Text disables these problematic formats by default, ... Check out the latest security news from the Informa TechTarget team.