Apache Commons Text
criticalCVSS 9.8
Text4Shell: string interpolation resolves script and URL lookups, allowing remote code execution.
Dampak
Code execution wherever user input reaches StringSubstitutor.
Perbaikan
Upgrade to commons-text 1.10.0 or later.
Referensi resmi
https://nvd.nist.gov/vuln/detail/CVE-2022-42889Apakah situs Boss terdampak?
VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2022-42889.
Jalankan audit gratis