Lucene search

K

Exploit for Deserialization of Untrusted Data in Apache Log4J

🗓️ 15 Dec 2021 17:13:42Type 
githubexploit
 githubexploit
👁 255 Views

Apache Log4J 2.0-beta9 to 2.14.1 allows improper input validation leading to remote code execution. Exploit via logAction, logGetHeaders, logPut, and logDelete endpoints

Show more
Related

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
15 Dec 2021 17:42Current
10High risk
Vulners AI Score10
CVSS29.3
CVSS310
EPSS0.94381
255
.json
Report