3 ms·
What’s the attack vector and required user action(s) here? Since Xcode projects allow arbitrary scripting I wouldn’t assume the presence of log4j makes anything
by thombles 5y ago
What’s the attack vector and required user action(s) here? Since Xcode projects allow arbitrary scripting I wouldn’t assume the presence of log4j makes anything _worse_.
- deleted 5y ago[deleted]
- gregoriol 5y agoIt seems to be in an component used for submitting apps to the App Store, a very local process, so not likely to get any usage as a "remote" code execution vector