CVE-2022-23848

In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability...

CVE-2022-23848

In CVE-2022-23848, Alluxio before 2.7.3 does not validate the input stream in the logserver, which could allow malformed data handling to affect logging behavior or control flow. The NVD metrics indicate a high-severity, network-exposed issue with potential impact to confidentiality, integrity, a...