Apache Log4j2 Issue

Apache Log4j2 Issue (CVE-2021-44228)

Crewmojo has conducted a thorough review of our code, infrastructure and service providers to detect any exposure to CVE-2021-44228. No exposure has been detected in our code - Java is not used in our technology stack.

Our infrastructure provider AWS continues to manage the issue across the scope of their services. Information on affected services and rectification in AWS are listed in detail here:https://aws.amazon.com/security/security-bulletins/AWS-2021-006/

From this information we don’t have any currently open queries on exposure with AWS. There are no items that Crewmojo need to action relating to any updates by AWS.

We continue to monitor the situation for any ongoing risks.