2 ms·

Cloudflare has published an article with clear mitigation options: https://blog.cloudflare.com/cve-2021-44228-log4j-rce-0-day-mitigation/ https://blog.cloudflar

• prdonahue 5y ago
  Given the severity, we've also rolled this out to our Free plan customers, who don't otherwise have access to the WAF.
  • philipwhiuk 5y ago
    Do you look and block for evasion attempts like: ${j${lower:n}${lower:d}i...} ?