Does anyone know if Jenkins is vulnerable to the new major log4j CVE: CVE-2021-44228 NVD - CVE-2021-44228 If so, are there any workarounds or what can we do to mitigate any risk from this CVE? I hope that this is the right place to ask this, if not, please let me know and I can go there. …

Is Jenkins vulnerable to the log4j CVE-2021-44228

halkeye (Gavin Mogan) December 10, 2021, 11:28pm 3

Topic		Replies	Views
Apache Log4j 2 vulnerability CVE-2021-44228 Blog & News	13	13232	January 22, 2022
Apache Commons Text vulnerability CVE-2022-42889 Ask a question	3	2458	October 21, 2022
We are on jenkins 2.491, is this version susceptible to CVE-2024-38821 Using Jenkins	2	82	January 3, 2025
CVE-2024-23898, CVE-2023-27899 and CVE-2023-43496 vulnerabilities on jenkins/jenkins:2.448-alpine-jdk17 Community question	7	639	March 13, 2024
How to resolve log4j vulnerabilities Ask a question	2	2317	January 21, 2022