Dear Open Foris Team,
as far as I have seen, Open Foris Collect uses the Java library log4j. At the end of 2021, a serious security vulnerability was discovered in the Java library log4j. Has this security vulnerability been closed in the current version 4.0.89 for Windows or does this problem still exist?
With kind regards
asked
NLPA 11●1●2 accept rate: 0%
Accepted answer
Dear user,
There were vulnerabilities in versions of log4j previous to 2.17.0 (18/12/2021) but they were fixed alredy in version 2.17.1 and Collect 4.0.89 uses version 2.20.0 (not the latest one, but it's from 21/02/2023), so it's not affected by this problem.
Many thanks for having raised this question and put an alert on that, it's always good to have a double check on these kind of issues.
Many thanks,
Open Foris Team
answered
Stefano (OF) ♦♦ 5.6k●1●1●9 accept rate: 18%
Once you sign in you will be able to subscribe for any updates here
