org.apache.logging.log4j:log4j-core vulnerabilities (Root)
5 vulnerabilities.
-
org.apache.logging.log4j:log4j-coreRoot Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters 6.9 Medium -
org.apache.logging.log4j:log4j-coreRoot Apache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility 6.9 Medium -
org.apache.logging.log4j:log4j-coreRoot Apache Log4j Core: verifyHostName attribute silently ignored in TLS configuration, allowing hostname verification bypass 6.3 Medium -
org.apache.logging.log4j:log4j-coreRoot Apache Log4j Core: Missing TLS hostname verification in Socket appender 6.3 Medium -
org.apache.logging.log4j:log4j-coreRoot Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration 6.6 Medium