Adding log4j2 2.14.1 vulnerability on purpose.

cesarhernandezgt · Jan 19, 2022 · 292af87 · 292af87
1 parent ff88674
commit 292af87
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -21,5 +21,19 @@
       <version>3.8.1</version>
       <scope>test</scope>
     </dependency>
+
+  <!-- Addin on purpose log4j CVE-->
+   <dependency>
+    <groupId>org.apache.logging.log4j</groupId>
+    <artifactId>log4j-api</artifactId>
+    <version>2.14.1</version>
+  </dependency>
+  <dependency>
+    <groupId>org.apache.logging.log4j</groupId>
+    <artifactId>log4j-core</artifactId>
+    <version>2.14.1</version>
+  </dependency>
+
   </dependencies>
+
 </project>