[
https://issues.apache.org/jira/browse/CXF-8778?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh resolved CXF-8778.
--------------------------------------
Resolution: Duplicate
> Upgrade commons-text to address CVE-2022-42889
> ----------------------------------------------
>
> Key: CXF-8778
> URL: https://issues.apache.org/jira/browse/CXF-8778
> Project: CXF
> Issue Type: Bug
> Affects Versions: 3.5.4, 3.4.9
> Reporter: Ragul
> Priority: Critical
>
> Version 3.5.4 & 3.4.9 of CXF contains the apache commons-text vulnerable
> library (1.9)
> [CVE - CVE-2022-42889
> (mitre.org)|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42889]
> Fix was available in 1.10.0 commons-text
> Is there any plan to upgrade and address this issue?
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
