Newly Disclosed Vulnerability in Apache Commons Text Allows for RCE (CVE-2022-42889) | allinfosecnews.com

Oct. 24, 2022, 1:12 a.m. |

FortiGuard Labs | FortiGuard Center - Threat Signal Report fortiguard.fortinet.com

UPDATE #1 2022/10/20: Updated protection section with IPS coverage.FortiGuard Labs is aware of reports of a recent vulnerability in Apache Commons, which allows for remote code execution. Assigned, CVE-2022-42889, Apache Commons Text prior to 1.10.0 allows remote code execution (RCE) when applied to untrusted input due to insecure interpolation defaults.What are the Details of this Vulnerability?According to Apache, version 1.5 and 1.9 of Apache Commons are affected. Apache Commons suffers from default Lookup instance where included interpolators could result in …

apache apache commons apache commons text commons commons text cve cve-2022-42889 rce text vulnerability

More from fortiguard.fortinet.com / FortiGuard Labs | FortiGuard Center - Threat Signal Report

PAN-OS Critical Flaw in GlobalProtect Gateway (CVE-2024-3400) 3 days, 15 hours ago | fortiguard.fortinet.com

advisory attack code code injection +27

XZ Utils Supply Chain Attack (CVE-2024-3094) 2 weeks, 1 day ago | fortiguard.fortinet.com

attack code compression cve +25

Nice Linear eMerge Command Injection Vulnerability (CVE-2019–7256) 3 weeks, 1 day ago | fortiguard.fortinet.com

access attacker code code execution +25

Jenkins Arbitrary File Read Vulnerability (CVE-2024-23897) 3 weeks, 2 days ago | fortiguard.fortinet.com

access application application developers attackers +31

Kimsuky Malware Attack 3 weeks, 3 days ago | fortiguard.fortinet.com

attack cyber entities espionage +15

JetBrains TeamCity Authentication Bypass Vulnerabilities (CVE-2024-27198, CVE-2024-27199) 1 month ago | fortiguard.fortinet.com

attacker authentication authentication bypass bypass +15

ConnectWise ScreenConnect Vulnerabilities (CVE-2024-1708 and CVE-2024-1709) 1 month, 3 weeks ago | fortiguard.fortinet.com

access advisory application attackers +28

Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2024-21410) 2 months ago | fortiguard.fortinet.com

attacks can critical cve +27

Ivanti Connect Secure and Policy Secure Gateways Zero-day Vulnerabilities (CVE-2023-46805, CVE-2024-21887, CVE-2024-21888, CVE-2024-21893) 2 months, 1 week ago | fortiguard.fortinet.com

advisory application authentication authentication bypass +23

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Information Security Engineers

@ D. E. Shaw Research | New York City

View on infosec-jobs.com

Information Systems Security Officer (ISSO), Junior

@ Dark Wolf Solutions | Remote / Dark Wolf Locations

View on infosec-jobs.com

Cloud Security Engineer

@ ManTech | REMT - Remote Worker Location

View on infosec-jobs.com

SAP Security & GRC Consultant

@ NTT DATA | HYDERABAD, TG, IN

View on infosec-jobs.com

Security Engineer 2 - Adversary Simulation Operations

@ Datadog | New York City, USA

View on infosec-jobs.com