An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.

Published Feb 5, 2024 · Updated Jun 17, 2025 · Assigned by mitre