News for hackers. Stuff that matters.
Re:Widespread exploitation of critical remote code execution... by taeric on Saturday December 11, 2021 @01:21PM (#29522996)
I think it depends how you log the request. If you did

    Logger.debug(request)
Vulnerable

If you did

    Logger.debug("{}", request)
Safe?

Reminds me of early days where sending printf directives to friends in chat applications could cause a crash.

Edit: I see some other comments are indicating parameters are also vulnerable. Crazy.

There are no comments on this comment yet.