system
Identify the affected product in <CVE-2020-1953>.
user
Which product is affected by <CVE-2020-1953>?
assistant
The affected product is Apache Commons Configuration and version: 2.2, 2.3, 2.4, 2.5, 2.6.