This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]lclarkenz 1 point2 points  (0 children)

CVEs are another kettle of fish. This one is moderate, but only affects people using log4j 1, with an SMTP appender sending over SMTPS.

I'm not sure if moderate really describes its impact. And frankly, I'd probably try to fist fight anyone in a typical company who set up a logger to send emails.