Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Duplicate
-
None
-
None
-
None
Description
Extends HADOOP-18341
https://commons.apache.org/proper/commons-text/changes-report.html#a1.10.0
StringInterpolator prior to v1.10.0 allowed scripting that could be problematic – a similar issue to one that led to CVE in commons-configuration2.
Attachments
Issue Links
- is duplicated by
-
HADOOP-18497 Upgrade commons-text version to fix CVE-2022-42889
-
- Resolved
-
- relates to
-
HADOOP-18341 upgrade commons-configuration2 to 2.8.0 and commons-text to 1.9
-
- Resolved
-
- links to