Inquiry on UiPath's logging framework - concerns on Log4Shell vulnerability

[codemonkee (Tim)]

Log4j critical vulnerability: CVE-2021-44228

We have just posted an update! For all versions of Insights below 2021.10, please see UiPath Security Advisory CVE | UiPath. We have mitigation steps posted at UiPath Security Advisory CVE | UiPath. We appreciate the patience while we investigated and worked to confirm impact and mitigation. We understand that many of you have been waiting for this announcement.

FYI another vulnerability for log4j was discovered CVE-2021-45046. It’s been addressed in the 2.16.0 as the original fix in 2.15.0 for CVE-2021-44228 was incomplete. – I’ve asked in the linked thread if this will be addressed in the same communication update.