Apache Commons Text

Text4Shell: The 9.8 Severity Score That Wasn’t Log4Shell

Post author:Prabhu Kalyan Samal
Post published:October 13, 2022
Post category:Security Supply Chain Security

CVE-2022-42889 in Apache Commons Text scored CVSS 9.8 but needed apps to interpolate attacker strings — most never did. The reachability-triage lesson.