USN-5223-1: Apache Log4j 1.2 vulnerability
USN-5223-1: Apache Log4j 1.2 vulnerability It was discovered that Apache Log4j 1.2 was vulnerable to deserialization of untrusted data if the configuration file was editable. An attacker could use this vulnerability to cause a DoS or possibly execute arbitrary code. Source: USN-5223-1: Apache Log4j 1.2 vulnerability