How to fix neo4j log4j issues

[koji (Koji Annoura)]

Hi @luckyyun

This post is helpful.

Log4J CVE Mitigation for Neo4j

Log4J CVE Mitigation for Neo4j

Hi Everyone, We are writing to alert you of a potential vulnerability issue - CVE-2021-44228 The issue impacts Neo4j version 4.2+. Versions 4.0 and 4.1 use slf4j-log4j12 and are not impacted. Version 4.2 introduces using log4j2 We are working on a fix in 4.2 and up (Neo4j versions 4.3 and 4.4), Meanwhile please use the configuration setting in your $PATH_TO_NEO4J/conf/neo4j.conf or /etc/neo4j/neo4j.conf. (That is also the case for Neo4j Desktop) dbms.jvm.additional=-Dlog4j2.formatMsgN…

Until the official version upgrade, I modified neo4j.conf to fix this.