CVE-2022-23307

CVE-2022-23307 is a deserialization vulnerability, originally identified as CVE-2020-9493 in Apache Chainsaw, that also affects Apache Log4j 1.2.x. With a CVSS score of 8.8 (High), this vulnerability allows an authenticated attacker to achieve high impact on confidentiality, integrity, and availability over a network with low attack complexity. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.