Forum Discussion

jpadilla's avatar
jpadilla
Guide
4 years ago

Is community impacted by Log4J vulnerability?

Is Khoros community compaged by this log4j vulnerability: CVE-2021-44228
-dirk-'s avatar
-dirk-
Maven
4 years ago

Khoros support is verry fast and answered me via case ticket:

Yes, Khoros uses log4j version 2.16.

khoros: Good job 👍

SyedSa's avatar
SyedSa
Moderator
4 years ago

Good to see you happy 🙂

  • -dirk-'s avatar
    -dirk-
    Maven
    4 years ago

    As for the news from this weekend, version 2.16 is also vulnerable, so the question arises whether the Khoros community is currently using version 2.17 already or when it will be used?

    If anyone have infos concerning this, please share with us.

    *fingers crossed*