CVE -2021-44228 Apache log4j vulnerability
Incident Report for wordly Inc.
Resolved
Apache recently reported a serious vulnerability with the log4j library and many of you may have seen it in the news. This vulnerability could allow execution of arbitrary code under specific circumstances, so it is very serious.

A Wordly cloud micro-service uses the log4j library. We have updated that library to the latest version that fixes the vulnerability and deployed the changes to both our development and production environments. We always monitor our systems and we have seen no evidence that anyone tried to exploit this issue before it was fixed.

Wordly is no longer vulnerable to this issue.
Posted Dec 12, 2021 - 14:00 PST