Skip to content
Noroxi

log4sh records

1 published records for vendor log4sh.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

        All records

        1 records
        • The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predi

          LowCVSS 2.1No exploitEPSS 0%

          log4sh · log4shSep 2, 2005