New Apache Log4j Update Released to Patch Newly Discovered Vulnerability.
28-Dec-21
Apache Log4j2 versions 2.0beta7 through 2.17.0 are vulnerable to a remote code execution (RCE) attack. An attacker with access to the logging configuration file can use a JDBC Appender to build a malicious configuration.
