Commons Text News Today

Read the latest Log4j headlines - updated 24/7/365. We link to the best sources from around the world. Get the latest on Log4Shell...

Here are some of the top news stories on Computing from the past week UKCloud goes into liquidation UKCloud, a major supplier of services to the UK public...

The newly disclosed RCE bug stems from the insecure implementation of Commons Text's variable interpolation feature, but it is hard to exploit

SecurityWeek reports that while cybersecurity experts have compared the critical Apache Commons Text security vulnerability, tracked as CVE-2022-42889, to the Log4Shell flaw, it is not expected to be as widespread as the latter.

A vulnerability (CVE-2022-42889) in the Apache Commons Text library has been getting attention from security researchers these last few days.

Experts say CVE-2022-42899 is a serious vulnerability, but widespread exploitation is unlikely because of the specific conditions that need to exist for it to happen.

Cybersecurity News

A remote code execution flaw in the open-source Apache Commons Text library has some people worried that it could turn into the next Log4Shell. However, most cybersecurity researchers say it is nowhere near as concerning.

A newly disclosed Apache Commons Text vulnerability may put many at risk, but does not appear to be as impactful or widespread as Log4Shell.

There's nothing yet to suggest CVE-2022-42889 is the next Log4j. But proof-of-concept code is available, and interest appears to be ticking up.