Re: Upgrade LOG4J?

Posted by jyeakley on
URL: http://owlready.306.s1.nabble.com/Upgrade-LOG4J-tp2938p2952.html

Yes, here are all the CVEs listed for that version:
CVE-2019-17571,CVE-2020-9488,CVE-2022-23302,CVE-2022-23305,CVE-2022-23307

These will get flagged on a scan. Additionally, be careful if you do upgrade to go to a later version to avoid the Log4Shell vulnerability.