Lucene search
+L

6741 matches found

vulnersOsv
vulnersOsv
•added 2022/10/13 7:00 p.m.•4 views

com.entityassist:entity-assist (0.70.0.4) potentially affected by CVE-2022-42889 via com.guicedee.services:commons-text (0.70.0.4)

com.guicedee.services:commons-text MAVEN version 0.70.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.guicedee.services:commons-text and may be impacted: - com.entityassist:entity-assist 0.70.0.4 Source cves: CVE-2022-42889 Source advisory:...

9.8CVSS0.99931EPSS
SaveExploits44
vulnersOsv
vulnersOsv
•added 2022/10/13 7:00 p.m.•4 views

com.entityassist:entity-assist (0.70.0.6) potentially affected by CVE-2022-42889 via com.guicedee.services:commons-text (0.70.0.6)

com.guicedee.services:commons-text MAVEN version 0.70.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.guicedee.services:commons-text and may be impacted: - com.entityassist:entity-assist 0.70.0.6 Source cves: CVE-2022-42889 Source advisory:...

9.8CVSS0.99931EPSS
SaveExploits44
vulnersOsv
vulnersOsv
•added 2022/10/13 7:00 p.m.•3 views

com.entityassist:entity-assist (>=1.0.0.0, <=1.0.9.14-jre14), com.guicedee.activitymaster:geography-master (1.1.1.8-jre16) +92 more potentially affected by CVE-2022-42889 via com.guicedee.services:commons-text (>=1.0.0.0, <=1.2.2.1-jre17)

com.guicedee.services:commons-text MAVEN version =1.0.0.0, =1.0.0.0, =1.0.1.6, =1.0.1.6, =1.0.1.6, =1.0.1.6, =1.0.1.6, =1.0.1.6, =1.0.1.6, =1.0.1.6, =1.0.1.6, =1.0.1.6, =1.2.2.1-jre17 and more Source cves: CVE-2022-42889 Source advisory: OSV:GHSA-599F-7C49-W659htt...

9.8CVSS0.99931EPSS
SaveExploits44
vulnersOsv
vulnersOsv
•added 2022/10/13 7:00 p.m.•3 views

com.entityassist:entity-assist (0.70.0.1-rc14) potentially affected by CVE-2022-42889 via com.guicedee.services:commons-text (0.70.0.1-rc14)

com.guicedee.services:commons-text MAVEN version 0.70.0.1-rc14 is affected by a known vulnerability. The following packages have a transitive dependency on com.guicedee.services:commons-text and may be impacted: - com.entityassist:entity-assist 0.70.0.1-rc14 Source cves: CVE-2022-42889 Source...

9.8CVSS0.99931EPSS
SaveExploits44
vulnersOsv
vulnersOsv
•added 2022/10/13 7:00 p.m.•4 views

ai.catboost:catboost-spark_3.0_2.12 (>=0.25, <=1.1.1), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +13757 more potentially affected by CVE-2022-42889 via org.apache.commons:commons-text (>=1.5, <=1.9)

org.apache.commons:commons-text MAVEN version =1.5, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

9.8CVSS0.99931EPSS
SaveExploits44
vulnersOsv
vulnersOsv
•added 2022/10/13 7:00 p.m.•5 views

com.entityassist:entity-assist (0.70.0.1-rc5) potentially affected by CVE-2022-42889 via com.guicedee.services:commons-text (0.70.0.1-rc5)

com.guicedee.services:commons-text MAVEN version 0.70.0.1-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on com.guicedee.services:commons-text and may be impacted: - com.entityassist:entity-assist 0.70.0.1-rc5 Source cves: CVE-2022-42889 Source...

9.8CVSS0.99931EPSS
SaveExploits44
vulnersOsv
vulnersOsv
•added 2022/10/13 7:00 p.m.•4 views

com.entityassist:entity-assist (0.70.0.2) potentially affected by CVE-2022-42889 via com.guicedee.services:commons-text (0.70.0.2)

com.guicedee.services:commons-text MAVEN version 0.70.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.guicedee.services:commons-text and may be impacted: - com.entityassist:entity-assist 0.70.0.2 Source cves: CVE-2022-42889 Source advisory:...

9.8CVSS0.99931EPSS
SaveExploits44
vulnersOsv
vulnersOsv
•added 2022/10/13 7:00 p.m.•4 views

com.entityassist:entity-assist (0.70.0.1-rc3) potentially affected by CVE-2022-42889 via com.guicedee.services:commons-text (0.70.0.1-rc3)

com.guicedee.services:commons-text MAVEN version 0.70.0.1-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on com.guicedee.services:commons-text and may be impacted: - com.entityassist:entity-assist 0.70.0.1-rc3 Source cves: CVE-2022-42889 Source...

9.8CVSS0.99931EPSS
SaveExploits44
vulnersOsv
vulnersOsv
•added 2022/10/13 7:00 p.m.•3 views

com.entityassist:entity-assist (0.70.0.5) potentially affected by CVE-2022-42889 via com.guicedee.services:commons-text (0.70.0.5)

com.guicedee.services:commons-text MAVEN version 0.70.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.guicedee.services:commons-text and may be impacted: - com.entityassist:entity-assist 0.70.0.5 Source cves: CVE-2022-42889 Source advisory:...

9.8CVSS0.99931EPSS
SaveExploits44
Github Security Blog
Github Security Blog
•added 2022/10/13 7:00 p.m.•767 views

Arbitrary code execution in Apache Commons Text

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8AI score0.99931EPSS
SaveExploits44References13Affected Software2
osv_ghsa
osv_ghsa
•added 2022/10/13 7:00 p.m.•36 views

GHSA-599F-7C49-W659 Arbitrary code execution in Apache Commons Text

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8AI score0.99931EPSS
SaveExploits44References13
osv_debian
osv_debian
•added 2022/10/13 1:15 p.m.•20 views

DEBIAN-CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8AI score0.99931EPSS
SaveExploits44References1
attackerkb
attackerkb
•added 2022/10/13 1:15 p.m.•6 views

CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8AI score0.99931EPSS
SaveExploits44References11Affected Software1
NVD
NVD
•added 2022/10/13 1:15 p.m.•48 views

CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS0.99931EPSS
SaveExploits44References9
osv_ubuntu
osv_ubuntu
•added 2022/10/13 1:15 p.m.•16 views

UBUNTU-CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8AI score0.99931EPSS
SaveExploits44References4
Prion
Prion
•added 2022/10/13 1:15 p.m.•56 views

Design/Logic Flaw

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

7.5CVSS9.9AI score0.99931EPSS
SaveExploits44References9Affected Software2
osv_cve
osv_cve
•added 2022/10/13 12:00 a.m.•60 views

CVE-2022-42889 Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

7.4AI score
SaveExploits0References11
CNNVD
CNNVD
•added 2022/10/13 12:00 a.m.•18 views

Apache Commons Text code injection vulnerability

Apache Commons Text is a library focused on string algorithms from the Apache Foundation, U.S. A remote code execution vulnerability exists in Apache Commons Text versions 1.5 through 1.9, which is caused by an insecure interpolation default flaw. An attacker could exploit this vulnerability to...

9.8CVSS8.3AI score0.99931EPSS
SaveExploits44References32
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/13 12:00 a.m.•4 views

CVE-2022-42889: Improper Control of Generation of Code

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8.2AI score0.99931EPSS
SaveExploits44References3
Vulnrichment
Vulnrichment
•added 2022/10/13 12:00 a.m.•45 views

CVE-2022-42889 Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

8AI score0.99931EPSS
SaveExploits44References9
Rows per page
Query Builder