Home / Vulnerability Database / Scala : Text4Shell Vulnerability
Scala

Scala : Text4Shell Vulnerability

Overview

Text4Shell is a vulnerability in commons-text, a popular Java library focused on algorithms working on strings, involving the execution of random code.

The application works with data from an unverified source. An attacker can inject malicious content into this data. When the application processes data, that line could cause the vulnerable system to download and run malicious code. As a result, an attacker can potentially get full remote control over the system.

We recommend upgrading to commons-text 1.10.0 and later versions.

CRITICAL

DerScanner Severity Score

Do you want to fix Scala : Text4Shell Vulnerability in your application?

See also

Scala

Scala : Unreleased resource stream

Scala

Scala : Multiple loggers in same class

Scala

Scala : Insufficient encryption key length