Severity
Medium
Analysis Summary
CVE-2023-31038
Apache Log4cxx is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the ODBC appender, which could allow the attacker to view, add, modify or delete information in the back-end database.
Impact
- Data Manipulation
Indicators Of Compromise
CVE
- CVE-2023-31038
Affected Vendors
Apache
Affected Products
- Apache Log4cxx 0.9.0
- Apache Log4cxx 0.10.0
- Apache Log4cxx 1.0.0
Remediation
Upgrade to the latest version of Apache Log4cxx, available from the Apache Website.