On: Log4j RCE Found

[grrrrrrreat]

Does this affect SL4j wrappers over log4j as well ?

[exec → grrrrrrreat]

Yes. I managed to reproduce the issue with slf4j + log4j2.

[sathishv → exec]

can you please share code sample? and what versions you used? i am unable to replicate with log4j 1.2.12, slf4j 1.7.6, java8-151

[orgesballa → sathishv]

Affected versions >= 2.0.0, < 2.0.11 < 1.11.10

So you are safe!

[voyager1 → orgesballa]

Do you have any reference about < 1.11.10 being affected? I though versions 1.x are not affected.