Log4Js Project Log4Js vulnerabilities

1 known vulnerability affecting log4js_project/log4js.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-21704MEDIUMCVSS 5.5fixed in 6.4.02022-01-19

CVE-2022-21704 [MEDIUM] CWE-276 CVE-2022-21704: log4js-node is a port of log4js to node.js. In affected versions default file permissions for log fi log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable (in unix). This could cause problems if log files contain sensitive information. This would affect any users that have not supplied their own permissions for the files via the