Apache Log4j 2

criticalCVSS 10.0

Log4Shell: JNDI lookup in logged strings leads to remote code execution.

Dampak

Full remote code execution from a single logged header value.

Perbaikan

Upgrade to 2.17.1 or later, or remove the JndiLookup class from older deployments.

Referensi resmi

https://nvd.nist.gov/vuln/detail/CVE-2021-44228

Apakah situs Boss terdampak?

VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2021-44228.

Jalankan audit gratis