URGENT! Zero-Day-Exploit in log4j

[christophdb]

please have a look at the following post for more details:

SECURITY ADVISORY: Seafile Server's vulnerability to "Log4Shell" (log4j vulnerability, CVE-2021-44228)

German version below… English version (last update at 12/17/2021, 1:30am) Here is the current status of our analyses on the log4j vulnerability - CVE-2021-44228: Important: the issue is dynamic and needs to be actively monitored further. Statements that are still current today may no longer be valid tomorrow. However, we will continue to inform you here in any case. Brief description of the vulnerability: The vulnerability in log4j exploits the unintended processing of manipulated log entries…