Second Log4j Vulnerability (CVE-2021-45046) Discovered — New Patch Released
UPDATE — The severity score of CVE-2021-45046, originally classified as a DoS bug, has since been revised from 3.7 to 9.0, to reflect the fact that an attacker could abuse the vulnerability to send a specially crafted string that leads to “information leak and remote code execution in some environments and local code execution in all environments.”
The Apache Software Foundation (ASF) has pushed
