CVE-2022-23848

CVSS v3.1 9.8 (Critical)

CVSS v2.0 7.5 (High)

EPSS 0.20 % (59^th)

Affected Products 1

Advisories 1

In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability.

		CPE23	From	Up To
	Alluxio prior 2.7.3 version	cpe:2.3:a:alluxio:alluxio		< 2.7.3