Newly Disclosed Vulnerability in Apache Commons Text Allows for RCE (CVE-2022-42889)

UPDATE #1 2022/10/20: Updated protection section with IPS coverage.FortiGuard Labs is aware of reports of a recent vulnerability in Apache Commons, which allows for remote code execution. Assigned, CVE-2022-42889, Apache Commons Text prior to 1.10.0 allows remote code execution (RCE) when applied to untrusted input due to insecure interpolation defaults.What are the Details of this Vulnerability?According to Apache, version 1.5 and 1.9 of Apache Commons are affected. Apache Commons suffers from default Lookup instance where included interpolators could result in …

apache apache commons apache commons text commons commons text cve cve-2022-42889 rce text vulnerability