CVE-2022-23848

In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-02-20

Last modified

2024-08-03

Affected products

• Alluxio (Alluxio)

References

• https://www.alluxio.io/download/releases/alluxio-2-7-3-release/