4 matches found
CVE-2022-42899
CVE-2022-42899 Apache Common Text starting from version 1.5 to 1.9 has Remote code execution vulnerability CVE-2022-42899. root@kitploit: final StringSubstitutor interpolator = StringSubstitutor.createInterpolator; interpolator.replace"$script:javascript:java.lang.Runtime.getRuntime.exec'"; // He...
ROS-20260224-73-0009
A vulnerability in the Apache Common Text library of FileMaker Server is related to improper control of code generation when using interpolation functions. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
ROS-20230922-01
Vulnerability in the StringSubstitutor component of the Apache Common Text library is related to mismanagement of code generation. code generation. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...