USN-5223-1: Apache Log4j 1.2 vulnerability
It was discovered that Apache Log4j 1.2 was vulnerable to deserialization of
untrusted data if the configuration file was editable. An attacker could use
this vulnerability to cause a DoS or possibly execute arbitrary code.
Source: USN-5223-1: Apache Log4j 1.2 vulnerability
