Hello there,
As you may know, a zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) was made public on December 9, 2021 that results in remote code execution (RCE).
For all organizations using Log4j, they should update to version 2.15.0 as soon as possible. The latest version can be found at the
Log4j download page.
Customers subscribing to our paid PRO and BUSINESS plans and using our WAF are automatically receiving help with mitigating this vulnerability.
As a Cloudflare FREE user, it is important to us that your site is protected from high severity vulnerabilities. For this reason we are actively deploying mitigation rules on your zones to block any malicious exploit attempts. No action is required from you to turn the new rules on.
For more information please see
our blog.
The Cloudflare Team
No comments:
Post a Comment