hxxps://logging.apache[.]org/log4j/2.x/release-notes.html#a2.16.0URL
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 4 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Critical RCE Vulnerability: log4j - CVE-2021-44228“…y disables JNDI by default and removes support for Message Lookups. You can find more release details here: hxxps://logging.apache[.]org/log4j/2.x/release-notes.html#a2.16.0”
Indicators reported together
named in the same reports- hxxps://logging.apache[.]org/log4j/2.x/in 1 report
- hxxps://logging.apache[.]org/log4j/2.x/release-notes.html#a2.17.0in 1 report
- maliciousexternalhost[.]comin 1 report
- malicioushost[.]comin 1 report
- hxxps://github[.]com/YfryTchsGD/Log4jAttackSurfacein 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2021-44228, CVE-2021-45105
Thanks — we review every report.