[NIFI-10648] Upgrade Commons Text to 1.10.0

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.19.0
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 14/Oct/22 13:56
• Updated: 24/Oct/22 15:10
• Resolved: 14/Oct/22 18:09

Description

Apache Commons Text versions prior to 1.10.0 are vulnerable to CVE-2022-42889, which involves potential script execution when processing untrusted input using StringLookup. Direct and transitive references to Apache Commons Text prior to 1.10.0 should be upgraded to avoid the default interpolation behavior.

Issue Links

• is related to: ARTEMIS-4060 Upgrade Commons Text to 1.10.0
• links to: GitHub Pull Request #6531