Debian/log4cxx: medium 5.4
Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to re
Action: Upgrade log4cxx to 1.0.0-1+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-1+deb12u1 | - |
Fixed versions
| 1.0.0-1+deb12u1 |
Sources
published · modified · JSON