log4j 1.2.17

[rle125]

SmartGWT 13.0p

I notice log4j 1.2.17 is still part of the 13.0p distribution. Do you know if it is vulnerable to these issues? Are there workarounds to avoid these vulnerabilities?

https://logging.apache.org/log4j/1.x/

[Isomorphic]

No, 13.0 does not have any of those vulnerabilities, because we don't use Log4j in a way that would make us vulnerable.

Later releases do use Log4j 2.x, basically because we kept getting asked this question!