Forum Discussion

HZO-GB's avatar
HZO-GB
Active Contributor
12 months ago
Solved

CVE-2018-1285 Apache log4net XML External Entity Vulnerability

********************************** EDIT1: 2024/05/06 DESPITE THE "SOLVED" MARKINGS THE VULNERABILITY REMAINS. DO NOT BE FOOLED BY GOTO! **********************************   Why is this ancient C...
  • GlennD's avatar
    GlennD
    12 months ago

    Hi HZO-GB, welcome to the community.

     

    The team is aware of this issue and it is being worked on currently. When an update is available I will share it here.

     

HZO-GB's avatar
HZO-GB
Active Contributor
9 months ago

I am getting the run-around with this 4 year old vulnerability. After multiple requests to escalate the case due to security concerns and false closures someone promised to contact the devs. Well, the software is still vulnerable, and the ticket is closed without notification, again.