CVE-2022-42889

Apache Commons Text vulnerability not as serious as Log4Shell, researchers say

Threats and Risks

Apache Commons Text vulnerability not as serious as Log4Shell, researchers say

The newly disclosed RCE bug stems from the insecure implementation of Commons Text's variable interpolation feature, but it is hard to exploit

clock 20 October 2022 • 4 min read