CVE-2022-42889-Analysis — CVE-2022-42889 취약점 분석보고서 | Kitploit
Tools / GitHub / sangrok-jeon / cve-2022-42889-analysis
sangrok-jeon/cve-2022-42889-analysis CVE-2022-42889-Analysis CVE-2022-42889 취약점 분석보고서
Discover the most used tools by our community.
Last 7 Days Last 30 Days
CVE-2022-42889 (Text4Shell) Report
A repository that organizes an analysis report for Apache Commons Text CVE-2022-42889 and attack demonstration materials based on a closed test environment.
Documents
Repository Structure
CVE-2022-42889-Report/
├─ README.md
├─ report/
│ └─ CVE-2022-42889_Text4Shell_Report.md
└─ images/
├─ 01-docker-check.png
├─ 02-maven-download.png
├─ ...
└─ 19-shell-success.png
Summary
Affected versions: Apache Commons Text 1.5 ~ 1.9
Main condition: when external input is passed through createInterpolator() and
replace()
Main dangerous lookups: script, dns, url
Test scope: normal operation verification, file creation based RCE verification, shell connection verification
Operational recommendations from a response and defense perspective
References 
sangrok-jeon/cve-2022-42889-analysis
