cubetiq-security-advisors/cve-2021-44225.md

Zero-Day CVE-2021-44225 (Log4J Java Library)

Details: https://cubetiq.atlassian.net/browse/CERT-1

Resolved

Upgrade log4j to version: 2.15.0

Spring Boot

Gradle Kotlin DSL (build.gradle.kts) (Gradle Multiple Modules)

allprojects {
    // Fixed Zero-Day CVE-2021-44225: https://cubetiq.atlassian.net/browse/CERT-1
    ext["log4j2.version"] = "2.15.0"
}

Gradle Kotlin DSL (build.gradle.kts) (Gradle Single Module)

implementation(platform("org.apache.logging.log4j:log4j-bom:2.15.0"))

Or

ext["log4j2.version"] = "2.15.0"

Gradle DSL (build.gradle) (Gradle Multiple Modules)

allprojects {
    ext {
        // Fixed Zero-Day CVE-2021-44225: https://cubetiq.atlassian.net/browse/CERT-1
        set('log4j2.version', '2.15.0')
    }
}

Or

ext {
    set('log4j2.version', '2.15.0')
}