Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/log4j/log4j@1.2
purl pkg:maven/log4j/log4j@1.2
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-2qrg-x229-3v8q
Aliases:
CVE-2019-17571
Deserialization of Untrusted Data in Log4j Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of … There are no reported fixed by versions.
CVE-2022-23307

Deserialization of Untrusted Data CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw … There are no reported fixed by versions.
CVE-2021-4104

Deserialization of Untrusted Data JMSAppender in Log4j is vulnerable to deserialization of untrusted data when the attacker has write access … There are no reported fixed by versions.
This package is not known to fix any advisories.