Log4j CVE-2021-44228

[AndreasT]

Is OpenEMM affected by the Log4j vulnerability the BSI has reported the last days?

[maschoff]

No

[nhondong]

Hi,

is there any official Statement with more information to this Bulletin?
openemm uses log4j in the affected Version. (1.2)

Please tell us why openemm is not affected.

Thanks.

Nils

[maschoff]

Because OpenEMM does not use the JMSAppender of Log4j1.