Apache Log4j 1 to Log4j 2 bridge vulnerabilities
1 known vulnerability in Apache Log4j 1 to Log4j 2 bridge from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Apache Log4j 1 to Log4j 2 bridge: Improper Encoding or Escaping of Output
The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output. Conforming XML parsers are required to reject documents containing such characters with a fatal error, w