Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text

In this post we’ll review CVE-2022-42889, the recent Arbitrary Code Execution Vulnerability in Apache Commons Text, including what it is, how to remediate it, and why it’s not the new Log4Shell.