Code injection

2024-02-0523:15:00

PRIOn knowledge base

www.prio-n.com

symphony

code injection

log4j

remote attacker

arbitrary code

nvd

8.2 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.3%

An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.

CPENameOperatorVersion
symphonyle3.6.3

CPE	Name	Operator	Version
	symphony	le	3.6.3

References

github.com/88250/symphony/issues/82