Open
Description
As result of the security issue: https://logging.apache.org/log4j/2.x/security.html, I found synthetics-minion.jar also uses log4j2, but I cannot make sure which version of log4j (it should be < 2.15.0, because 2.15.0 is released on Dec 10th.)could you confirm the version and provide mitigation solution?