Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/10 6:31 p.m.10 views

GHSA-445C-VH5M-36RJ Apache Log4j Core: log injection in `Rfc5424Layout` due to silent configuration incompatibility

Apache Log4j Core's Rfc5424Layout, in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CRLF sequences due to undocumented renames of security-relevant configuration attributes. Two distinct issues affect users of stream-based syslog services who configure Rfc5424Layout directly:...

6.9CVSS5.8AI score0.00831EPSS
SaveExploits0References8
Rows per page
Query Builder