Gregory Anne

Results 3 issues of Gregory Anne

Hi, Further this vulnerability discovered in v1.x, can we possibly release log4j without the JMSAppender. Here are recommendations provided on Slf4's website: http://slf4j.org/log4shell.html See section on log4j 1.x: ``` In...

This change will fix CVE-2019-17571 and all log4shell issues

Hi, I have been able to rebuild the project completely and introduce new startup logs, and here's what I'm getting: ![image](https://github.com/baidu/openrasp/assets/11486760/a50de407-cec6-40dd-a271-e589641e7bb1) So it seems openrasp starts correctly and the config...