Java : Text4Shell Vulnerability

Text4Shell is a vulnerability in commons-text, a popular Java library focused on algorithms working on strings, involving the execution of random code.

The application works with data from an unverified source. An attacker can inject malicious content into this data. When the application processes data, that line could cause the vulnerable system to download and run malicious code. As a result, an attacker can potentially get full remote control over the system.

We recommend upgrading to commons-text 1.10.0 and later versions.