5 ms·
finding the log4j jar is not the problem, it could have been patched. Finding the one that has vulnerable code is the issue.
by suyash 5y ago
finding the log4j jar is not the problem, it could have been patched. Finding the one that has vulnerable code is the issue.
- kjeetgill 5y agoIt so needs solving. Everyone should be using upgraded jars. Except as a stopgap, you shouldn't rely on patched Jars.