title: How can I mitigate the Log4Shell vulnerability in version 1.2 of Log4j?
body: <p>I've got a very old version of <a href="https://en.wikipedia.org/wiki/Apache_Solr" rel="nofollow noreferrer">Solr</a> and I've been trying to see if it is affected by the <a href="https://en.wikipedia.org/wiki/Log4Shell" rel="nofollow noreferrer">Log4Shell vulnerability</a> that everybody is freaking out about (<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228" rel="nofollow noreferrer">CVE-2021-44228</a>).</p>
  <p>The CVE only seems to apply to later versions, but a colleague doesn't buy it, so I'm trying to figure out the truth.</p>