Lucene search
+L

79 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 3:25 a.m.•17 views

SUSE CVE-2022-33980

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the...

8.1CVSS7.7AI score0.44644EPSS
SaveExploits4References3
RedHat Linux
RedHat Linux
•added 2023/01/26 9:42 a.m.•16 views

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

9.8CVSS7.6AI score0.99931EPSS
SaveExploits42References7
RedHat Linux
RedHat Linux
•added 2023/01/18 2:55 p.m.•15 views

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

9.8CVSS7.6AI score0.99931EPSS
SaveExploits42References7
RedHat Linux
RedHat Linux
•added 2022/12/14 1:15 p.m.•30 views

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

9.8CVSS7.6AI score0.99931EPSS
SaveExploits42References7
RedHat Linux
RedHat Linux
•added 2022/12/08 1:25 p.m.•15 views

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

9.8CVSS7.6AI score0.99931EPSS
SaveExploits42References7
RedHat Linux
RedHat Linux
•added 2022/12/07 8:19 a.m.•14 views

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

9.8CVSS7.6AI score0.99931EPSS
SaveExploits42References7
RedHat Linux
RedHat Linux
•added 2022/11/28 2:39 p.m.•12 views

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

9.8CVSS7.6AI score0.99931EPSS
SaveExploits42References7
Tenable Nessus
Tenable Nessus
•added 2022/11/28 12:00 a.m.•48 views

Debian DSA-5290-1 : commons-configuration2 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5290 advisory. - Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is...

9.8CVSS8.4AI score0.44644EPSS
SaveExploits4References6
GithubExploit
GithubExploit
•added 2022/10/23 5:48 a.m.•367 views

Exploit for Code Injection in Apache Commons_Text

CVE-2022-42889-POC Proof of Concept for the Apache commons-tex...

9.8CVSS8.1AI score0.99931EPSS
SaveExploits42
OSV
OSV
•added 2022/10/13 7:00 p.m.•31 views

GHSA-599F-7C49-W659 Arbitrary code execution in Apache Commons Text

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8AI score0.99931EPSS
SaveExploits42References13
Github Security Blog
Github Security Blog
•added 2022/10/13 7:00 p.m.•758 views

Arbitrary code execution in Apache Commons Text

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8AI score0.99931EPSS
SaveExploits42References13Affected Software2
NVD
NVD
•added 2022/10/13 1:15 p.m.•45 views

CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS0.99931EPSS
SaveExploits42References9
Prion
Prion
•added 2022/10/13 1:15 p.m.•51 views

Design/Logic Flaw

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

7.5CVSS9.9AI score0.99931EPSS
SaveExploits42References9Affected Software2
OSV
OSV
•added 2022/10/13 1:15 p.m.•14 views

UBUNTU-CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8AI score0.99931EPSS
SaveExploits42References4
OSV
OSV
•added 2022/10/13 12:00 a.m.•57 views

CVE-2022-42889 Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

7.4AI score
SaveExploits0References11
Debian CVE
Debian CVE
•added 2022/10/13 12:00 a.m.•148 views

CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8AI score0.99931EPSS
SaveExploits42
UbuntuCve
UbuntuCve
•added 2022/10/13 12:00 a.m.•112 views

CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS7.7AI score0.99931EPSS
SaveExploits42References3
Mend
Mend
•added 2022/10/13 12:00 a.m.•0 views

CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS0.99931EPSS
SaveExploits42References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/13 12:00 a.m.•0 views

CVE-2022-42889: Improper Control of Generation of Code

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS8.2AI score0.99931EPSS
SaveExploits42References3
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/19 3:41 p.m.•51 views

Security Bulletin: Due to use of Apache Commons, IBM Cloud PAK for Watson AI Ops is vulnerable to remote code execution (CVE-2022-33980)

Summary Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that...

9.8CVSS9.9AI score0.44644EPSS
SaveExploits4Affected Software1
Rows per page
Query Builder