← Back

Log4sh

log4sh

Vendor: Log4sh • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Log4sh
1Log4sh
Apr 16, 2026
Sep 2, 2005
N/A· v4
N/A· v3
2.1 LOW· v2
The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames.