org.ops4j.pax.logging:pax-logging-log4j2 vulnerabilities (Maven)
5 vulnerabilities.
org.ops4j.pax.logging:pax-logging-log4j2MavenApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration6.6 Mediumorg.ops4j.pax.logging:pax-logging-log4j2MavenApache Log4j2 does not always protect from infinite recursion in lookup evaluation5.9 Mediumorg.ops4j.pax.logging:pax-logging-log4j2MavenApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticalorg.ops4j.pax.logging:pax-logging-log4j2MavenRemote code injection in Log4j (through pax-logging-log4j2)No scoreorg.ops4j.pax.logging:pax-logging-log4j2MavenApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Critical