Page Comparison

...

This zero day exploit affects log4j 2.x+ which Jira, confluence and by extension, our apps do not use.

• https://youtu.be/m_AkCbFc8DM

Default Jira/Confluence are not vulnerable

...

As JEMH specifically processes user generated content we have also verified that the exploit doesn’t work from email content with default configurations of log4j.

Related links:

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228

• https://github.com/advisories/GHSA-jfh8-c2jp-5v3q