CVE-2023-31038: Apache Log4cxx: SQL injection when using ODBC appender

2023-05-07 Thread Robert Middleton
Severity: 6.8 Affected versions: - Apache Log4cxx 0.9.0 before 1.1.0 Description: SQL injection in Log4cxx when using the ODBC appender to send log messages to a database.  No fields sent to the database were properly escaped for SQL injection.  This has been the case since at least version 0

Re: [ANNOUNCE] Apache Log4j Transformation Tools 0.1.0 released

2023-05-07 Thread Gary Gregory
Thanks Piotr! Gary On Sat, May 6, 2023, 15:16 Piotr P. Karwasz wrote: > The Apache Log4j 2 team is pleased to announce the Apache Log4j > Transformation Tools 0.1.0 release! > > Apache Log4j Transformation Tools is a subproject of Apache Log4j that > provides binary manipulation tools for Log4j