christophetd / log4shell-vulnerable-app

Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Select log4j version?

carlchan opened this issue · comments

Any way to select specific log4j version to be installed to test the various versions?

Just add to build.gradle (for 2.16.0):

configurations.all {
	resolutionStrategy.eachDependency { DependencyResolveDetails details ->
		if (details.requested.group == 'org.apache.logging.log4j') {
			details.useVersion '2.16.0'
		}
	}
}

Thanks @asksven, closing since you explained