ZAPI Version: 2.7.1.27107788 and Log4j Security Vulnerability

[jmorales]

Please confirm if ZAPI Version: 2.7.1.27107788 is exposed to the Log4j Security Vulnerability

[sonya_m]

Hi @jmorales, please refer to the official up-to-date SmartBear page on the vulnerability handling: https://smartbear.com/security/cve-2021-44228/ 

[jmorales]

Thank you for the information. We have already patched our Zephyr Squad Jira Plugin to address the Log4j security vulnerability. Does Zephyr Squad also include ZAPI ?? The links provided is unclear if ZAPI is bundled with Zephyr Squad.

[sanjeevpande · Accepted solution]

Hello @jmorales ,

ZAPI plugin is no longer needed with Zephyr Squad. It is bundled within the Zephyr Squad application. You can refer to following guide to refer how API's can be used. https://support.smartbear.com/zephyr-squad-server/docs/api/index.html

The document also refers a note with the following details:

---

Note:

Previously, to access Zephyr Squad REST API, you had to install an additional plugin (ZAPI). As of October 2020, the API is available out-of-the-box, and the ZAPI plugin is no longer needed.

---

Please let us know if you have additional questions.

Thank you.

Best regards,

Sanjeev Pande