-
```
The current default log4j.xml uses the RollingFileAppender.
Requirements
=========
For cases where logfiles are to be moved and archived using some script-based
approach it is hard to know which…
-
## CVE-2022-23307 - High Severity Vulnerability
Vulnerable Library - log4j-1.2.17.jar
Apache Log4j 1.2
Path to dependency file: /modules/objectmappers-smooks/pom.xml
Path to vulnerable library: /hom…
-
The scanner is looking for The scan tool uses the following file to determine the log4j version and in the embedded jar ant is removing this file. is there a way not to flag 2.17.1 as effected?
META-…
-
In order to register a [Custom Logback Converter](https://logback.qos.ch/manual/layouts.html#customConversionSpecifier) through conversion rules it is currently required to provide a custom `logback.x…
-
检测到 TFdream/mango 一共引入了34个开源组件,存在18个漏洞
```
漏洞标题:Apache Log4j不可信数据反序列化漏洞
缺陷组件:log4j:log4j@1.2.16
漏洞编号:CVE-2019-17571
漏洞描述:Apache Log4j是美国阿帕奇(Apache)软件基金会的一款基于Java的开源日志记录工具。
Apache Log4j 1.2版本中存在安全漏洞。攻…
ghost updated
2 years ago
-
## License Policy Violation detected in log4j-api-2.6.1.jar
Library - log4j-api-2.6.1.jar
The Apache Log4j API
Library home page: http://logging.apache.org/log4j/2.x/log4j-api/
Path to dependency fi…
-
**Alluxio Version:**
When running mvn dependency:tree
```
1.
[INFO] +- org.alluxio:alluxio-core-common:jar:2.10.0-SNAPSHOT:compile
[INFO] | +- org.apache.zookeeper:zookeeper:jar:3.5.5:compile
…
-
## CVE-2021-44228 - Critical Severity Vulnerability
Vulnerable Library - log4j-core-2.14.0.jar
The Apache Log4j Implementation
Library home page: https://logging.apache.org/log4j/2.x/
Path to depend…
-
- The location of the dependency - Maven (https://mvnrepository.com/artifact/org.slf4j/log4j-over-slf4j/1.7.32)
- The CPE that is believed to be false positive: cpe:2.3:a:apache:log4j:1.7.32
False…
-
```
What steps will reproduce the problem?
1. Create an artifact com.foo:baz as baz.jar with log4j.properties.
2. Create onejar as baz.onejar.jar.
3. Place another log4j.properties in the working-dire…