TI-2021-20283 CVE-2021-44832 · GHSA-8489-44mv-ggj8
Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration
Priority HIGH 76
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data so…