Description
Due to vulnerabilities in Log4j library used by Ubiquiti Unifi, an unauthenticated attacker can leak sensitive information or execute arbitrary code on the system.
Remediation
Upgrade to the latest version of Ubiquiti Unifi
References
Related Vulnerabilities
WordPress Plugin YaySMTP-Simple WP SMTP Mail Information Disclosure (2.2)
WordPress Plugin Import all XML, CSV & TXT into WordPress Information Disclosure (3.6.74)
Ivanti Sentry Authentication Bypass (CVE-2023-38035)
Unauthenticated remote code execution vulnerability in Confluence Server and Data Center
WordPress Plugin SL User Create Information Disclosure (0.2.4)