Log4j2 RCE Vulnerability for CVE-2021-44228

[shinsuke]

Update: We released Fess 13.15.3 for the second Log4j vulnerability CVE-2021-45046.

Solutions:
Users may upgrade to Fess 13.15.3, or remove JndiLookup.class from log4j-core-*.jar