What's new

Welcome to the GSA Community!

This is the Official User Community for GE's GeoSpatial Analysis products. By registering with us, you'll be able to discuss, share and private message with other members of our Community.
Registration is currently only allowed with a personalized invitation code, which you might have received previously. If you haven't got one:
please get in touch with your GE contact person or your regional moderator(s): see FAQ.

SignUp Now!

Vulnerabilities - Apache Commons Text

gijsbertnoordam

Spatial Eye - Moderator
Staff member
Confirmed GSA Customer
Joined
Mar 20, 2020
Messages
9
Recently many news flashes have been published on security vulnerabilities from the widely-used Apache Commons Text Java-based library:

https://nvd.nist.gov/vuln/detail/CVE-2022-42889#vulnCurrentDescriptionTitle

The Apache Commons Text library is not incorporated into any of the Spatial Eye software.

If Spatial Eye software has been exposed through third-party proxy server infrastructure, this needs to be validated against potential vulnerabilities.
 
Top