Uploaded image for project: 'James Server'
  1. James Server
  2. JAMES-3683

Upgrade Log4j to 2.15.0 - CVE-2021-44228

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 3.6.1
    • 3.7.0, 3.6.1
    • None

    Description

      Log4j has an RCE vulnerability, see https://www.lunasec.io/docs/blog/log4j-zero-day/

      Attachments

        Issue Links

          is cloned by

          Bug - A problem which impairs or prevents the functions of the product. JAMES-3684 Upgrade Log4j to 2.15.0 - CVE-2021-44228

          • Major - Major loss of function.
          • Closed
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. JAMES-3685 upgrade to log4j 2.17.1

          • Major - Major loss of function.
          • Closed
          links to

          Web Link GitHub Pull Request #793

          Web Link GitHub Pull Request #794

          Activity

            People

              Unassigned Unassigned
              arnaud-lefebvre Arnaud Lefebvre
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 50m
                  50m