Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-1525 Issue to group security concerns
  3. OFBIZ-12470

[SECURITY] CVE-2021-45105: Apache Log4j2

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • 18.12.03
    • 18.12.04
    • ALL COMPONENTS
    • None
    • Bug Crush Event - 21/2/2015

    Description

      CVE-2021-45105: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 does not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue is fixed in Log4j 2.17.0.: https://logging.apache.org/log4j/2.x/security.html

      Attachments

        Issue Links

          is a clone of

          Sub-task - The sub-task of the issue OFBIZ-12449 [SECURITY] CVE-2021-44228: Apache Log4j2

          • Blocker - Blocks development and/or testing work, production could not run
          • Closed

          Activity

            People

              jleroux Jacques Le Roux
              jleroux Jacques Le Roux
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: