A public exploit is available for Commons-Text 1.9. Versions 1.10 and higher have been patched to address the public exploit.