We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents b524a61 + 68a0efa commit 80b9ccfCopy full SHA for 80b9ccf
java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql
@@ -1,7 +1,8 @@
1
/**
2
- * @name Log4j log injection and LDAP JNDI injection
+ * @name Potential Log4J LDAP JNDI injection (CVE-2021-44228)
3
* @description Building Log4j log entries from user-controlled data may allow
4
- * attackers to inject malicious code through JNDI lookups.
+ * attackers to inject malicious code through JNDI lookups when
5
+ * using Log4J versions vulnerable to CVE-2021-44228.
6
* @kind path-problem
7
* @problem.severity error
8
* @precision high
0 commit comments