Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-5892

Upgrade Apache Commons-text for CVE-2022-42889

    XMLWordPrintable

Details

    Description

      DISCLAIMER

      Crowd IS NOT VULNERABLE to CVE-2022-42889.

      This bug was created to track the change required to upgrade the Apache Commons Text library and can be used by customers to follow its progress and get notified on the next numbered release.

      Crowd does not use the vulnerable module org.apache.commons.text.StringSubstitutor

      Issue Summary

      Apache Common Text library should be upgraded to 1.10.0 or later to mitigate any exploiting attempts listed on CVE-2022-42889

      Steps to Reproduce

      Check <install-directory>/crowd-webapp/WEB-INF/lib/ for commons-text-X.X.jar

      Expected Results

      apache-common-text 1.10.0+ is expected

      Actual Results

      commons-text-1.9.jar (or earlier) is used

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. CWD-5924 Upgrade Apache Commons-text for CVE-2022-42889

          • Medium - Medium priority issues
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. CONFSERVER-81048 Upgrade Apache Commons-text for CVE-2022-42889

          • Highest - Our top priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-74501 Upgrade Apache Commons-text for CVE-2022-42889

          • Highest - Our top priority issues
          • Needs Triage
          causes

          KRAK-4903 Loading...

          is cloned by

          KRAK-4873 Loading...

          mentioned in

          Page Loading...

          Activity

            People

              Unassigned Unassigned
              caronson Cole Aronson
              Votes:
              31 Vote for this issue
              Watchers:
              27 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: