Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-23307

A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Log4j 1.x

  • 1.2.1 to < unspecifiedaffected
  • unspecified to ≤ 2.0-alpha1affected

References