News for hackers. Stuff that matters.

A comment on Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet reference guide. Parent comment

Re:Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sh... by layer8 on Monday December 13, 2021 @03:31PM (#29544225)
It’s still an issue with current JDKs in certain environments (e.g. Tomcat), see https://mbechler.github.io/2021/12/10/PSA_Log4Shell_JNDI_Inj... and https://www.veracode.com/blog/research/exploiting-jndi-injec....

Also, 8u121 was an incomplete fix, the complete fix (still with limitations as noted above) is in 8u191 (see second link above).

[ Parent | on HN ]

There are no comments on this comment yet.