CVE-2021-44228 PoC — Apache Log4j 代码问题漏洞

Source

Associated Vulnerability

Description

Mitigate log4shell (CVE-2021-44228) vulnerability attacks using Nginx LUA script

Readme

# nginx-mitigate-log4shell
Mitigate log4shell (CVE-2021-44228 and CVE-2021-45046) vulnerability attacks using Nginx LUA script

Requires the Nginx lua module (https://www.nginx.com/resources/wiki/modules/lua/) to be enabled.

Use `include /path/to/mitigate-log4shell.conf;` in the `server {...}` context. Can be included in multiple server contexts.

Can also be placed in the `http {...}` context and is therefore automatically applied on every Nginx config.

More information in our blog article: https://www.infiniroot.com/blog/1155/using-nginx-lua-script-mitigate-log4shell-cve-2021-44228-vulnerability .

File Snapshot

 [4.0K]  /data/pocs/14cc97948762c437ae3f54aaa41bade746d68a81
├── [3.9K]  examples-in-the-wild.md
├── [ 11K]  LICENSE
├── [1.4K]  mitigate-log4shell.conf
└── [ 609]  README.md

0 directories, 4 files

Remarks