Lucene search
+L

1 matches found

OSV
OSV
•added 2026/04/10 6:31 p.m.•18 views

GHSA-445C-VH5M-36RJ Apache Log4j Core: log injection in `Rfc5424Layout` due to silent configuration incompatibility

Apache Log4j Core's Rfc5424Layout, in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CRLF sequences due to undocumented renames of security-relevant configuration attributes. Two distinct issues affect users of stream-based syslog services who configure Rfc5424Layout directly:...

6.9CVSS6.6AI score0.01187EPSS
SaveExploits0References8
Rows per page
Query Builder