Does Bitbucket server 6.4.0 use Apache Commons Text (v 1.5-1.9), per CVE-2022-42889?

Question

Is Apache Commons Text used in Bitbucket server 6.4.0? If so, how can we remediate for CVE-2022-42889? Thank you!

Fabio Racobaldo _Catworkx_ · Accepted Answer

Hi @Tony Simon ,

this security issue is currently under investigation by the Atlassian Team. Please keep you update using the following link https://www.atlassian.com/trust/security/advisories

Hope this helps,

Fabio