Details
-
Bug
-
Status: Closed
-
High
-
Resolution: Fixed
-
None
-
None
-
None
-
Pulsar
-
Pulsar 294 - Cycle 6-1, Pulsar 295 - Cycle 6-2
Description
[original title:] Is there any Security issues log4jshell V2.16.0 in hippo-addon-checker?
Is “hippo-addon-checker.jar” vulnerable to log4jshell V2.16.0 and if so how do we mitigate this problem?
You can see the client request here:
"The add-on checker v.2.5.0 uses Log4J Core V2.16.0 that has vulnerabilities that can be found here:
https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core/2.16.0
Is there any possibility to update to version 2.17.1 at least preferably 2.17.2?"
Attachments
Issue Links
- relates to
-
CMS-14906 Security issue log4jshell in hippo-addon-checker?
- Closed