Description
In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability.
Remediation
References
https://www.alluxio.io/download/releases/alluxio-2-7-3-release/
Related Vulnerabilities
CVE-2023-49656 Vulnerability in maven package org.jenkins-ci.plugins:matlab
CVE-2022-24999 Vulnerability in maven package org.webjars.npm:qs
CVE-2017-1000118 Vulnerability in maven package com.typesafe.akka:akka-http-core_2.11
CVE-2023-32689 Vulnerability in npm package parse-server
CVE-2019-16562 Vulnerability in maven package org.jenkins-ci.plugins:buildgraph-view