Lucene search
+L

1 matches found

OSV
OSV
added 2022/01/03 7:36 a.m.11 views

MGASA-2022-0002 Updated log4j packages fix security vulnerability

Apache Log4j2 is vulnerable to a remote code execution RCE attack where an attacker with permission to modify the logging configuration file can construct a malicious configuration using a JDBC Appender with a data source referencing a JNDI URI which can execute remote code. This issue is fixed b...

8.5CVSS7.2AI score0.97906EPSS
SaveExploits9References4
Rows per page
Query Builder