CVE-2022-42889-POC

CVE-2022-42889-POC Apache commons-text 취약점 CVE-2022-42889에 대한 개념 증명PoC입니다. 문제점 : Apache Commons Text는 변수 보간interpolation을 수행하여 속성을 동적으로 평가하고 확장할 수 있습니다. 보간의 표준 형식은 "$prefix:name"이며, 여기서 "prefix"는 보간을 수행하는 org.apache.commons.text.lookup.StringLookup 인스턴스를 찾는 데 사용됩니다. 버전 1.5부터 1.9까지의 기본 Lookup 인스턴스...

SUSE CVE-2022-33980

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the...

GHSA-599F-7C49-W659 Arbitrary code execution in Apache Commons Text

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

DEBIAN-CVE-2022-33980

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the...