CVE:CVE-2020-9493
CNNVD:CNNVD-202106-1293
Apache Chainsaw是一个Log4j 的配套应用程序。
Apache Chainsaw 2.1.0之前的版本存在安全漏洞，该漏洞源于反序列化缺陷，可能导致恶意代码执行。
solution:Upgrade apache chainsaw to a higher version than 2.1.0,and avoid the version (,2.1.0); Upgrade apache log4j to a higher version than 2.0,and avoid the version [1.2,2.0); Upgrade qos reload4j to a higher version than 1.2.18.1,and avoid the version (,1.2.18.1)