Eclipse Community Forums: Newcomers » is jetty vulnerable to log4shell?

Home » Newcomers » Newcomers » is jetty vulnerable to log4shell?

is jetty vulnerable to log4shell? [message #1848640]

Fri, 10 December 2021 18:56

Eclipse User

Would anyone explain about jetty/log4shell question? Is jetty vulnerable or not ?

I saw some xml files with "log4j2" string in names but there is no log4j2 libraries in distribution. Sorry for newbie question, but i am very alarmed.

Re: is jetty vulnerable to log4shell? [message #1848647 is a reply to message #1848640]

Sun, 12 December 2021 02:30

Eclipse User

I don't believe Jetty is using org.apache.logging.log4j but they won't read your question here so you better use their using mailing list:

https://www.eclipse.org/jetty/support.php

Previous Topic:	Window Builder blank
Next Topic:	I can't seem to find org.eclipse.jdt.internal.compilerfmt.AnnotationInfo

Goto Forum:

-=] Back to Top [=-

Current Time: Thu Jul 17 00:22:59 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter