Description
Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Apache Log4j2 | Apache Software Foundation / Apache Log4j2 | >= 2.0-beta9, < log4j-core* | affected |