> ## Documentation Index
> Fetch the complete documentation index at: https://docs.raleyapps.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Raley Purchase Orders Log4Shell patch — December 2021

> Security release notes for Raley Purchase Orders December 2021: CVE-2021-44228 Log4Shell patch, affected versions, and required upgrade steps for customers.

## Summary

On December 13, 2021, Atlassian security testing identified a critical vulnerability in the Raley Purchase Orders AppServer related to **CVE-2021-44228** (log4j Remote Code Execution, also known as Log4Shell).

The patch was developed and deployed to production **the same day**.

## Details

* **Vulnerability:** CVE-2021-44228 — log4j RCE
* **Severity:** Critical
* **Discovered:** December 13, 2021 (via Atlassian security testing)
* **Patched:** December 13, 2021

A specially crafted HTTP request could have exploited the log4j vulnerability on the Raley Purchase Orders AppServer.

## Impact Assessment

Based on investigation of production access logs, no malicious HTTP requests of this type were detected prior to the patch. The risk of exploitation before patching is considered very unlikely.

## Action Required

**No action is required from customers.** The fix was applied automatically on the server side.

## Questions?

* **Email:** [support@raleyapps.com](mailto:support@raleyapps.com)
* **Service Portal:** [inversionpoint.atlassian.net/servicedesk](https://inversionpoint.atlassian.net/servicedesk/customer/portal/3)

***

## Explore Other RaleyApps

<CardGroup cols={2}>
  <Card title="Raley Emails Notifications" icon="envelope" href="/apps/raley-emails-notifications">
    Send customized emails and Slack notifications from Jira and JSM.
  </Card>

  <Card title="Raley Intake Forms" icon="file-lines" href="/apps/raley-intake-forms">
    Create powerful intake forms directly inside Jira and JSM.
  </Card>

  <Card title="Raley Bookman" icon="calendar-check" href="/apps/raley-bookman">
    Asset booking management inside the JSM portal.
  </Card>

  <Card title="Raley Favorites" icon="star" href="/apps/raley-favorites">
    Save and quickly access your most important Jira issues.
  </Card>
</CardGroup>

[Browse all RaleyApps on the Atlassian Marketplace →](https://marketplace.atlassian.com/vendors/1212475/inversion-point-llc?utm_source=mintify\&utm_medium=productdocs\&utm_campaign=footage\&utm_term=\&utm_content=)