Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Log4cxx

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-31038

    Apache Log4cxx: SQL injection when using ODBC appender

    SQL injection in Log4cxx when using the ODBC appender to send log messages to a database.  No fields sent to the database were properly escaped for SQL injection.  This has been the case since at least version 0.9.0(released 2003-08-06) Note that Log4cxx is a…

    Apache Software Foundation Apache Log4cxx log4cxx log4cxx Debian Ubuntu