Log4j Vulnerability Cheatsheet

How it works, where to practice, and how to identify

Bug Bounty Tip :: Log4j Vulnerability Cheatsheet

Description

Java logging library, log4j, has an unauthenticated RCE vulnerability if a user-controlled string is logged. CVE-2021–44228 (Log4Shell)

Affected versions — Apache log4j 2.0-beta9 ≤ 2.14.1

How It Works