.. / CVE-2021-45046

• RCE
• Nuclei
• Web

Exploit for Apache Log4j2 - Remote Code Injection (CVE-2021-45046)

Description:

Apache Log4j2 Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.

Nuclei Template

View the template here CVE-2021-45046.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-45046.yaml

References: