Our response to Log4J zero-day vulnerability
Dear Reader, We are summarising in this post our considerations with respect to the infamous Log4Shell vulnerability, code CVE-2021-44228. The understanding of the vulnerability is still evolving and the reports are being updated, we are monitoring them closely and adapting as needed. The following information is based on our current understanding of the vulnerability and will be updated as new information is released. A quick status of our products Most important information first, following our own investigation as well as our understanding of the reported vulnerability the situation is as follows: GeoServer, GeoWebCache and MapStore are not vulnerable to CVE-2021-44228...
More