Currently , I am using apachie.logging.log4j. artifact is log4j-slf4j-impl . Version 2.12.0.
My question is that log4j-slf4j-impl is also affected by this recent security vulnerability.
>Solution :
Yes this version is vulnerable.
It has a transitive runtime dependency to log4j-core in version 2.12.0. which contains the vulnerability.
So you should update log4j-slf4j-impl to Version 2.15.0 containing the fix as fast as possible.