Solved
Is readyapi 3.10.1 affected by log4j security vulnerability issues?
Is readyapi 3.10.1 affected by log4j security vulnerability issues? If so are we getting any new updates. ?
Forum Discussion
I also would like to have a quick answer on this from Smartbear.
From what I can see, the 2.11.0 version is used, which is part of the impacted versions (source: https://www.randori.com/blog/cve-2021-44228/) . Upgrading to 2.15.0 would be recommended.
The same link your reply has how to mitigate, please refer the excerpt. So, one can update the respective scripts (such as ready-api.sh / testrunner.sh ; .bat / .cmd files for windows platform; have backup of the same scripts before updating so that if something does not work, you can rollback the file changes) under READY_HOME/bin to add the following in the JAVA_OPTS.