René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"CVE-2022-23307 @ Maven-log4j:log4j-1.2.17","articleBody":"**Vulnerable Package** issue exists @ **Maven\\-log4j:log4j\\-1\\.2\\.17** in branch **main**\r\n\r\nCVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0, Chainsaw was a component of Apache Log4j 1.x where the same issue exists.\r\n\r\n**Namespace:** James-AST\r\n**Repository:** astlab\r\n**Repository Url:** https://github.com/James-AST/astlab\r\n**CxAST\\-Project:** James-AST/astlab\r\n**CxAST platform scan:** [8d73a497\\-bbc7\\-4126\\-b536\\-ea634bc032dd](https://ast.checkmarx.net/projects/f9affdfe-1e7c-4bfc-a40a-f266cde328d3/scans?id=8d73a497-bbc7-4126-b536-ea634bc032dd\u0026branch=main)\r\n**Branch:** main\r\n**Application:** astlab\r\n**Severity:** HIGH\r\n**State:** NOT_IGNORED\r\n**Status:** RECURRENT\r\n**CWE:** CWE-502\r\n\r\n\r\n----\r\n**Addition Info**\r\n**Attack vector:** NETWORK\r\n**Attack complexity:** LOW\r\n**Confidentiality impact:** HIGH\r\n**Availability impact:** HIGH\r\n\r\n\r\n----\r\n**References**\r\n[Mail Thread](https://lists.apache.org/thread/rg4yyc89vs3dw6kpy3r92xop9loywyhh)\r\n[Issue](https://bugzilla.redhat.com/show_bug.cgi?id=2041967)\r\n[Advisory](https://github.com/advisories/GHSA-f7vh-qwp3-x37m)\r\n[Advisory](https://logging.apache.org/log4j/1.2/index.html)\r\n","author":{"url":"https://github.com/jbrotsos","@type":"Person","name":"jbrotsos"},"datePublished":"2022-04-26T16:35:49.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/10/astlab/issues/10"}