Apache Commons Text (Text4Shell) Vulnerability

Unnamed User

• April 18, 2024 16:11

Hello,

Our most recent vulnerability scan detected the Apache Commons Text RCE (Text4Shell) vulnerability on our cPanel 118.0.5 server.  We are running on Ubuntu 20.04 and the Apache Commons Text package isn't installed.   Is this just a false positive?

Thanks,

Bobby

• 

  cPRex Jurassic Moderator

  • April 18, 2024 19:38

  Hey there!  This is a false positive has cPanel itself has never been affected by this vulnerability:

  https://support.cpanel.net/hc/en-us/articles/9655309989783-Apache-Commons-Text-CVE-2022-42889

   

  0

Please sign in to leave a comment.