Memo for Log4Shell（Apache Log4j Vulnerability）
Summary
Remote code execution vulnerabilities related to Apache Log4j.
Official source
- Apache Log4j Security Vulnerabilities
- Who named it Log4Shell?
lunasec.io
Demonstration
PoC
Tester
References
- LunaSec Guide: How To Detect and Mitigate the Log4Shell Vulnerability
- Security Advisories
Security Advisories / Bulletins / vendors Responses linked to Log4Shell (CVE-2021-44228) - Techsolvency
Log4Shell log4j vulnerability (CVE-2021-44228 / CVE-2021-45046) - cheat-sheet reference guide - Microsoft
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2 – Microsoft Security Response Center - Cybereason
Cybereason/Logout4Shell - Alibaba Cloud Team
【漏洞通告】Apache Log4j2 远程代码执行漏洞（CVE-2021-44228/CVE-2021-45046） - piyolog
Log4jの深刻な脆弱性CVE-2021-44228についてまとめてみた
