upgrade Apache Log4j Core to 2.25.4

XMLWordPrintable

    • 31
    • 8

      Summary:

      Confluence is currently using a version of Apache Log4J Less than 2.25.4. As a result, many automated security scanners are triggering for CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-34481

      Suggestion

      Please update the version of Apache Log4J used by Confluence to version 2.25.4 or newer

        1. screenshot-1.png
          screenshot-1.png
          319 kB

              Assignee:
              Unassigned
              Reporter:
              Lou Paglaiccetti
              Votes:
              14 Vote for this issue
              Watchers:
              20 Start watching this issue

                Created:
                Updated: