log4j Vulnerability

21 views

Skip to first unread message

Rodrigo Gutierrez

unread,

Dec 28, 2021, 6:29:37 PM12/28/21

to membrane-monitor

Hi, I would like to know if the vulnerability of log4j (Another Apache Log4j Vulnerability Is Actively Exploited in the Wild (CVE-2021-44228)) affects membrane in version 4.7 and 4.8. I was reviewing and they have the log4j-1.2.17.jar version and the recommendation is to migrate to version 2.17.1. If I update it, does it affect the operation?