New CVE for Java apps on common-text.jar

Server
1

Hello

we are using latest version of own cloud server on prem and there is new CVE related to apache Java vulnerability CVE-2022-42889

does the CVE impact the Own Cloud instance if so what is the best way to patch it with the new commons-text.1.10.0.jar?

BR
Aviram Booxbaum

2

Hi,

given that ownCloud is a PHP project there is no dependency on Java libraries. As a result you should not be affected at all.

Note that you might have side services for search for example that might be affected.

regards,
Klaas

2 Likes
3

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.