pkg:Maven/org.zenframework.z8.dependencies.commons:log4j-1.2.17

All known vulnerabilities

• CRITICAL9.8CVE-2022-23305SQL Injection in Log4j 1.2.x
  from 0, <= 2.0
• CRITICAL9.8CVE-2022-23307Deserialization of Untrusted Data in Apache Log4j
  from 0, <= 2.0
• CRITICAL9.8CVE-2019-17571apache-log4j1.2 - security update
• HIGH8.8Deserialization of Untrusted Data in Log4j 1.x
  from 0, <= 2.0
• HIGH7.5apache-log4j1.2 - security update
  from 0, <= 2.0