News for hackers. Stuff that matters.

A comment on Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet reference guide. Parent comment

Re:Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sh... by shartte on Monday December 13, 2021 @03:44PM (#29544383)
I believe this is the default in Spring Boot. Logback is used by their starters (see https://docs.spring.io/spring-boot/docs/current/reference/ht...).
[ Parent | on HN ]
Re:Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sh... by zorr on Monday December 13, 2021 @04:38PM (#29545015)
Yes, recent Spring-boot projects include log4j-to-slf4j, slf4j-api, logback-core and logback-classic which AFAIK are not vulnerable.
[ Parent | on HN ]