The GoTo Community is currently in Read Only mode, we apologize for any inconvenience. Please contact our support team if you need assistance https://support.goto.com/   

Forum Discussion

HZO-GB's avatar
HZO-GB
Active Contributor
2 years ago
Solved

CVE-2018-1285 Apache log4net XML External Entity Vulnerability

********************************** EDIT1: 2024/05/06 DESPITE THE "SOLVED" MARKINGS THE VULNERABILITY REMAINS. DO NOT BE FOOLED BY GOTO! **********************************   Why is this ancient C...
  • GlennD's avatar
    GlennD
    2 years ago

    Hi HZO-GB, welcome to the community.

     

    The team is aware of this issue and it is being worked on currently. When an update is available I will share it here.

     

HZO-GB's avatar
HZO-GB
Active Contributor
2 years ago

I am getting the run-around with this 4 year old vulnerability. After multiple requests to escalate the case due to security concerns and false closures someone promised to contact the devs. Well, the software is still vulnerable, and the ticket is closed without notification, again.