CVE-2022-42889

EPSS 99.93%
Veröffentlicht 13.10.2022 13:15:10
Zuletzt bearbeitet 21.11.2024 07:25:32
Erkennungen
Login

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation. Starting with version 1.5 and continuing through 1.9, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - "script" - execute expressions using the JVM script execution engine (javax.script) - "dns" - resolve dns records - "url" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Text 1.10.0, which disables the problematic interpolators by default.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 12

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apache ≫ Commons Text Version >= 1.5 < 1.10.0

Netapp ≫ Bluexp Version -

Juniper ≫ Security Threat Response Manager Version < 7.5.0

   Juniper ≫ Jsa1500 Version -
   Juniper ≫ Jsa3500 Version -
   Juniper ≫ Jsa3800 Version -
   Juniper ≫ Jsa5500 Version -
   Juniper ≫ Jsa5800 Version -
   Juniper ≫ Jsa7500 Version -
   Juniper ≫ Jsa7800 Version -

Juniper ≫ Security Threat Response Manager Version 7.5.0 Update -

Juniper ≫ Security Threat Response Manager Version 7.5.0 Update up1

Juniper ≫ Security Threat Response Manager Version 7.5.0 Update up2

Juniper ≫ Security Threat Response Manager Version 7.5.0 Update up3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	99.93%	1

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://packetstormsecurity.com/files/171003/OX-App-Suite-Cross-Site-Scripting-Server-Side-Request-Forgery.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/176650/Apache-Commons-Text-1.9-Remote-Code-Execution.html

http://seclists.org/fulldisclosure/2023/Feb/3

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2022/10/13/4

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2022/10/18/1

Third Party Advisory

Mailing List

https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om

Vendor Advisory

Mailing List

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0022

Third Party Advisory

https://security.gentoo.org/glsa/202301-05

Third Party Advisory

https://security.netapp.com/advisory/ntap-20221020-0004/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-42889

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-42889

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-42889

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-42889