Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

allow mulitple results for the same log4j version #233

Open
pickeld opened this issue Jan 4, 2022 · 1 comment
Open

allow mulitple results for the same log4j version #233

pickeld opened this issue Jan 4, 2022 · 1 comment
Assignees
@xeraph
Labels
discussion question or suggestion

Comments

@pickeld
Copy link

pickeld commented Jan 4, 2022

on log4j version 2.15 there are multiple CVEs but log4j2-scan only show one.
is it possible to show all CVEs related to a specific log4j version?

[*] Found CVE-2021-44228 (log4j 2.x) vulnerability in log4j-core-2.14.0.jar, log4j 2.14.0

i would have expecting that CVE-2021-44832 will also show up.
@xeraph
Copy link
Contributor

xeraph commented Jan 4, 2022

No. For simplicity, scanner shows only most significant vulnerability.

@xeraph xeraph self-assigned this Jan 4, 2022
@xeraph xeraph added the discussion question or suggestion label Jan 4, 2022
@xeraph xeraph mentioned this issue Feb 1, 2022
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@xeraph xeraph

Labels
discussion question or suggestion
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@xeraph @pickeld