What do you guys think of Apache Commons Text vuln, CVE-2022-42889? Is it Log4J 2.0?

I just started at a large international conglomerate style company in vulnerability management. I'm somewhat green as it is (I'm pretty good with Windows OS vulns but app software, webserver, and Linux as a whole, I have a lot of learning to do). I'm on like my second day, and we've caught wind of this vulnerability.


My research seems to indicate a pretty simple fix (Update to 1.10) but since I've never been a software dev, I'm not sure how …

apache apache commons apache commons text commons cve cve-2022-42889 cybersecurity log4j text vuln