Enhancement: cves/2021/CVE-2021-45046.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-02-28 13:56:15 -05:00
parent 9ab6b54780
commit fd60d738d5
1 changed files with 3 additions and 1 deletions

View File

@ -4,7 +4,7 @@ info:
name: Remote code injection in Log4j
author: ImNightmaree
severity: critical
description: Apache Log4j2 Thread Context Lookup Pattern vulnerable to remote code execution in certain non-default configurations.
description: Apache Log4j2 Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.
reference:
- https://securitylab.github.com/advisories/GHSL-2021-1054_GHSL-2021-1055_log4j2/
- https://twitter.com/marcioalm/status/1471740771581652995
@ -64,3 +64,5 @@ requests:
group: 1
regex:
- '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Print extracted ${hostName} in output
# Enhanced by mp on 2022/02/28