Log4j2 vulnerability?

Hi! I see the file https://github.com/danialfarid/ng-file-upload/blob/master/demo/src/main/resources/log4j.properties exists in the demo of this project.

Is this demo vulnerable to log4j2 exploits? If so, this needs to be updated ASAP.