Security Concern

[Paul Minogue]

Hi Modlr team,

Can you please confirm you have addressed the below:

On Thursday a new vulnerability was announced for an Apache logging service, allowing arbitrary code to be run on any device using the common Apache logging framework log4j: https://www.infoworld.com/article/3644492/how-to-detect-the-log4j-vulnerability-in-your-applications.amp.html It largely affects internet-facing services as the attackers needs to inject a string.

Regards,

paul

 

[Ben Hill]

Hi Paul,

This came across engineering at 11am on Saturday, we have reviewed the exploit against MODLR and because we do not use the log4j libraries we aren't susceptible.

Thanks,
Ben