log4j dependency has critical vulnerability CVE-2021-44228 in Bitbar Run-in-Cloud Plugin

XMLWordPrintable

      See JENKINS-67353

      https://github.com/jenkinsci/testdroid-run-in-cloud-plugin

      Update to 2.15 is not sufficient due to https://nvd.nist.gov/vuln/detail/CVE-2021-45046, it requires 2.16.
      This one is less important but will still be detected by scanners and alert all users.

            Assignee:
            Bitbar Testdroid
            Reporter:
            Daniel Beck
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: