New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

vulnerable log4j.jar file #30

Open

schloegl opened this issue Jan 3, 2022 · 2 comments

Assignees

schloegl commented Jan 3, 2022

When running log4j-detect on PDV-1.7.4, it identified the file PDV-1.7.4/lib/log4j-1.2.12.jar as vulnerable

That tool recommends to upgrade log4j to v2.17.1 from here
https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core

wenbostar assigned KaiLiCn

Collaborator

KaiLiCn commented Jan 3, 2022

Hi,

Really appreciate your remind. We will upgrade it soon.

Kai

Author

schloegl commented Jan 3, 2022

Thanks for the quick response. I'm looking forward to the fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment