Date：2022/10/28

【Security Vulnerability Warning】Apache Commons Text exists a Text4Shell security vulnerability (CVE-2022-42889), please confirm and update as soon as possible

Subject: Apache Commons Text exists a Text4Shell security vulnerability (CVE-2022-42889), which allows attackers to remotely execute arbitrary code. Please confirm and update as soon as possible!

Description:
For details, please refer to the following links.

https://nvd.nist.gov/vuln/detail/CVE-2022-42889

https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om

https://www.openwall.com/lists/oss-security/2022/10/13/4

https://thehackernews.com/2022/10/hackers-started-exploiting-critical.html

https://zh-tw.tenable.com/plugins/nessus/166250

https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10140

Network System Division
Computer and Communication Center