CVE-2022-23848

CRITICAL CVSS: 9.8 Published: 2022-02-20 Modified: 2026-06-17

Description

In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability.

Affected Platforms

Alluxio Alluxio

Weakness Type

NVD-CWE-noinfo

References