Log4j security leak
-
Hey,
you are probably wondering if i-doit is also affected by the vulnerability CVE-2021-44228 aka Log4j.i-doit pro is not affected by the vulnerability.
i-doit pro is based solely on PHP and Javascript, we do not use any Java code or libraries.
Also, the Apache web server does not use the vulnerable software. If suspicious records appear in the logs, it could be attempts to actively exploit the vulnerability.