+1
Log4Shell vulnerability - is there a security update for this?
https://www.zdnet.com/article/log4j-zero-day-flaw-what-you-need-to-know-and-how-to-protect-yourself/
Is there a patch available or in process for this security risk? Any recommendations for what we should be doing to protect ourselves? Thanks!
Customer support service by UserEcho
XTRF does not use the vulnerable library therefore is not at risk and no special patches are necessary.
However, if you have any other java applications besides core XTRF application, you should review them independently.
Good to know. Thank you!