Apache Commons Text Vulnerability - Vulnerability

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
December 18, 2025
Last Seen
December 18, 2025

A critical vulnerability in the Apache Commons Text library that enables remote code execution.

Overview

A critical vulnerability in the Apache Commons Text library that enables remote code execution. The flaw affects Java applications that incorporate Commons Text and can allow an attacker to execute arbitrary code on a vulnerable system by sending crafted input. This makes the vulnerability highly significant for organizations relying on templating and string substitution features in Java software.

Related Threat Clusters

  • Apache Commons Text Vulnerability Allows Remote Code Execution

    A critical vulnerability in Apache Commons Text, tracked as CVE-2025-46295, has been disclosed, enabling remote code execution (RCE) attacks. This flaw affects versions prior to 1.10.0, allowing attackers to exploit…

    3 articles · Updated December 18, 2025

Recent Intelligence Reports

  • Critical Apache Commons Text Vulnerability Enables Remote Code Execution — Cyberpress · December 18, 2025

CVSS v3.1 Breakdown