Description
Apache log4j2存在远程代码执行漏洞，此漏洞是缺乏校验导致的。
Apache Log4j2 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://help.aliyun.com/zh/emr/emr-on-ecs/product-overview/vulnerability-announcement-or-rce-vulnerability-in-apache-log4j-2
https://www.cnblogs.com/M0urn/articles/17761205.html
https://www.huaweicloud.com/notice/2021/20211210001621800.html
https://www.anquanke.com/post/id/262668
https://www.secrss.com/articles/37160
https://bbs.chaitin.cn/topic/410
https://github.com/dbgee/log4j2_rce
https://its.pku.edu.cn/announce/tz20211210095018.jsp
https://zhuanlan.zhihu.com/p/443689489
https://www.tencentcloud.com/zh/document/product/627/47897
https://www.shellcodes.org/Hacking/CVE-2021-44228%EF%BC%88Apache%20Log4j2%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%EF%BC%89%E5%88%86%E6%9E%90.html
https://nosec.org/m/share/4917.html
https://unit42.paloaltonetworks.com/apache-log4j-vulnerability-cve-2021-44228/
https://nvd.nist.gov/vuln/detail/cve-2021-44228
https://www.cisa.gov/news-events/news/apache-log4j-vulnerability-guidance
https://www.exploit-db.com/exploits/50592
https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476
https://my.f5.com/manage/s/article/K19026212
https://en.wikipedia.org/wiki/Log4Shell