Update apache-solr-log4j-rce.yaml

patch-1
Ritik Chaddha 2022-07-16 22:38:06 +05:30
parent e065e78756
commit a312af919a
1 changed files with 2 additions and 1 deletions

View File

@ -10,12 +10,13 @@ info:
- https://solr.apache.org/security.html#apache-solr-affected-by-apache-log4j-cve-2021-44228 - https://solr.apache.org/security.html#apache-solr-affected-by-apache-log4j-cve-2021-44228
- https://twitter.com/sirifu4k1/status/1470011568834424837 - https://twitter.com/sirifu4k1/status/1470011568834424837
- https://github.com/apache/solr/pull/454 - https://github.com/apache/solr/pull/454
- https://logging.apache.org/log4j/2.x/security.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-44228 - https://nvd.nist.gov/vuln/detail/CVE-2021-44228
classification: classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cvss-score: 10.0 cvss-score: 10.0
cwe-id: CWE-77 cwe-id: CWE-77
tags: solr,oast,log4j,rce,apache,jndi tags: cve,cve2021,solr,oast,log4j,rce,apache,jndi
requests: requests:
- method: GET - method: GET