about the Apache Log4j vulnerability(trello)

[mkosuge]

To whom it may concern

hello,
My name is Kosuge from Yahoo Japan Corporation.

I have a question about the Apache Log4j vulnerability*.
Can you tell us about the impact of the vulnerability on our service (trello)?

-------------
(1) Affected: (None / Yes / Confirming)
(2) Response status: (completed/in progress/not yet addressed)
(3) scheduled completion date: YY/MM/DD
(4)URL for external disclosure of response status (if any)
-------------

(*) Vulnerability information by IPA
https://www.ipa.go.jp/security/ciadr/vul/alert20211213.html
We apologize for the inconvenience, but we would appreciate your response.

I'm sorry, but we're in a hurry, and we need your answer by December 22nd.

[Vishwas]

Hi @mkosuge 

As far as I know Trello Cloud is not mentioned in this document , and Atlassian has already  mentioned that Atlassian cloud customers are not vulnerable, and no action is required.

FAQ's related to log4j vulnerability can be found here

https://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html

Regards,

Vishwas