CVE-2022-23307 vulnerability

How does CVE-2022-23307 affect the following software products?

• Regular locally installed Matlab (Mac, PC, and Linux). All versions : current, plus old/historical (e.g. 2014b).
• The MATLAB MCR runtime library (needed to run standalone executables someone compiled with the MATLAB Compiler Toolbox)

A scan tool provide us a critial allert on a server where are present legacy dlls and Matlab runtime.

[Rik]

https://www.mathworks.com/matlabcentral/answers/1610640-apache-log4j-vulnerability-cve-2021-44228-how-does-it-affect-matlab

[Mario Garbelli]

The description wasn't alligned with the title. I meant CVE-2022-23307...

[Rik]

You might want to post a comment on that threat linking to this question. Maybe Sebastian will be able to respond to this one as well.

As Walter commented: Very few of the volunteers who answer questions here can speak for Mathworks. This is something that should be raised with Mathworks Support.

[Mario Garbelli]

I prefer to open an official ticket to mathworks. I need a official confirmation. Thank you!

Answer 1

[Steven Lord]

Please contact Technical Support with this question to receive an official answer.

[Mario Garbelli]

I've already create a case for this.