Erudika / scoold-pro

Cloud-ready Q&A platform for the enterprise (self-hosted, on premise)
https://scoold.com
Other
7 stars 0 forks source link

Apache Log4J vulnerability #57

Closed jorgeag68 closed 2 years ago

jorgeag68 commented 2 years ago

Hello.

Can you confirm if scoold is using log4j and if it is vulnerable to:

https://github.com/advisories/GHSA-jfh8-c2jp-5v3q

Thank you.

albogdano commented 2 years ago

Scoold is using Logback instead of Log4j and is not vulnerable.

jorgeag68 commented 2 years ago

Thank you.