LSV-896: Use of library with known vulnerability: Apache Log4j 2.11.2 (Connector to Elasticsearch 6)

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 7.1 DXP (7.1.10), 7.2 DXP (7.2.10)
• Fix Version/s: 7.1.x EE, 7.2.X EE
• Component/s: Search Infrastructure > Elasticsearch Connector, Security Vulnerability
• Labels:
  • liferay-fixpack-dxp-15-7210
  • liferay-fixpack-dxp-25-7110
  • marketplace-portal-search-elasticsearch6-1.3.1-7010
• CVE IDs: CVE-2020-13956
• 7.1 Fix Pack Version: 25
• 7.2 Fix Pack Version: 15

Created by Liferay Branch Manager
If you have any questions or thoughts, please do not hesitate to contact us on Slack in the #d-enterprise-release channel.
Any questions regarding the fix packs should go to the #rle-fix-packs channel.