Maven/log4j:log4j CVE-2023-26464: high 7.5, EPSS 1.91%
Apache Log4j 1.x (EOL) allows Denial of Service (DoS)
Action: Upgrade log4j:log4j to 2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.4 | 2.0 | - |
Fixed versions
| 2.0 |
Sources
- osv: GHSA-vp98-w2p3-mv35#Maven/log4j:log4j
- https://nvd.nist.gov/vuln/detail/CVE-2023-26464
- https://github.com/apache/logging-log4j2
- https://lists.apache.org/thread/wkx6grrcjkh86crr49p4blc1v1nflj3t
- https://security.netapp.com/advisory/ntap-20230505-0008
CVE-2023-26464 · published · modified · JSON