CVE-2022-42889-POC

CVE-2022-42889-POC Apache commons-text 취약점 CVE-2022-42889에 대한 개념 증명PoC입니다. 문제점 : Apache Commons Text는 변수 보간interpolation을 수행하여 속성을 동적으로 평가하고 확장할 수 있습니다. 보간의 표준 형식은 "$prefix:name"이며, 여기서 "prefix"는 보간을 수행하는 org.apache.commons.text.lookup.StringLookup 인스턴스를 찾는 데 사용됩니다. 버전 1.5부터 1.9까지의 기본 Lookup 인스턴스...

CVE-2022-42889-RCE

CVE-2022-42889-PoC CVE-2022-42889 원격 코드 실행 취약점Text4Shell 취약점의 개념 증명입니다. ⭐를 눌러 지원해 주세요 ❤️ 이 취약점에 대해 CVE-2022-42889는 Spring4Shell 및 Log4Shell과 유사한 새로운 심각한 취약점입니다. 이는 심각도 점수 9.8의 RCE원격 코드 실행 취약점입니다. 이를 통해 공격자는 공격 대상 머신에서 임의의 악성 코드를 실행할 수 있습니다. 영향을 받는 버전은 Apache Commons Text의 1.5 1.9입니다. 작동 방식 Apache...

SUSE CVE-2022-33980

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the...

CVE-2022-42889. Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults.

Security Advisory ID : BSA-2022-2096 Component : Apache Commons Text Revision : 1.1 Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an...

CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

apache-commons-configuration: Apache Commons Configuration insecure interpolation defaults

A flaw was found in Apache Commons Configuration's variable interpolation, which by default included several lookup actions that could permit script invocation on remote servers. This issue could allow an attacker to use one of these actions to send a request to execute arbitrary code on the serv...

CVE-2022-33980: Undefined Security Weakness

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the...