report-service.json

{
  "module": "report-service",
  "advisory": "CVE-2022-42889",
  "artifact": "org.apache.commons:commons-text",
  "cases_sha256": "ea3ac7b9e1fc1dc7049222d7b4157e34b435927389036138b00feaabb28f225c",
  "recorded_at": "2026-09-01T00:21:00.792251+00:00",
  "reason": "report-service now builds on JDK 17 (Spring Boot 3.2): Nashorn is gone, so the script lookup no longer evaluates",
  "cases": [
    {
      "id": "banner-title",
      "outcome": "ok",
      "value": "# OtterWorks Report: Quarterly Usage"
    },
    {
      "id": "banner-period",
      "outcome": "ok",
      "value": "# Period: 2026-01-01 to 2026-03-31"
    },
    {
      "id": "banner-rows",
      "outcome": "ok",
      "value": "# Rows: 42"
    },
    {
      "id": "banner-undefined-variable-rejected",
      "outcome": "error",
      "error_type": "java.lang.IllegalArgumentException",
      "error_message": "Cannot resolve variable 'notProvided' (enableSubstitutionInVariables=false)."
    },
    {
      "id": "footer-base64-and-const",
      "outcome": "ok",
      "value": "# Generated by OtterWorks Reporting | INTERNAL USE ONLY"
    },
    {
      "id": "configured-sys-property",
      "outcome": "ok",
      "value": "sep=/"
    },
    {
      "id": "configured-url-decoder",
      "outcome": "ok",
      "value": "report name"
    },
    {
      "id": "configured-file-lookup",
      "outcome": "ok",
      "value": "banner-from-file"
    },
    {
      "id": "attack-script-lookup",
      "outcome": "error",
      "error_type": "java.lang.IllegalArgumentException",
      "error_message": "Error in script engine [javascript] evaluating script [3+4]."
    },
    {
      "id": "attack-dns-lookup",
      "outcome": "ok",
      "value": "127.0.0.1"
    },
    {
      "id": "attack-url-lookup",
      "outcome": "error",
      "error_type": "java.lang.IllegalArgumentException",
      "error_message": "Error looking up URL [http://127.0.0.1:1/otterworks] with Charset [UTF-8]."
    }
  ]
}