Description
Due to vulnerabilities in Log4j library used by Ubiquiti Unifi, an unauthenticated attacker can leak sensitive information or execute arbitrary code on the system.
Remediation
Upgrade to the latest version of Ubiquiti Unifi
References
Related Vulnerabilities
Deserialization of Untrusted Data (Java JSON Deserialization) Jackson
Apache HTTP Server mod_proxy SSRF (CVE-2021-40438)
Oracle Business Intelligence ReportTemplateService XXE CVE-2019-2616
ColdFusion WDDX Deserialization RCE (CVE-2023-29300/CVE-2023-38203/CVE-2023-38204)
WordPress Plugin Quick Buy For Woocommerce Arbitrary File Disclosure (2.0)