critical9.8
CVE-2024-23049
An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.
Impact
An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| B3log | Symphony | through 3.6.3 |