Re: Resurrecting log4j 1.x

[Vladimir Sitnikov]

>Where is this CVE tonnage?

JMSAppender
JMSSink
chainsaw
SocketServer
infinite recursion (1.x does have some recursive code trying to replace
variables)
....

I do not know CVE numbers, yet I just see the bugs are there.

Vladimir