Exploit for Deserialization of Untrusted Data in Apache Log4J

Name: Exploit for Deserialization of Untrusted Data in Apache Log4J
Rating: 5 (248 reviews)

2021-12-16 | CVSS 8.9

## https://sploitus.com/exploit?id=931205E1-36E0-52BF-A978-D4C326F6A32A
# vuln_spring_log4j2

Vulnerable spring application for testing the log4j2 (CVE-2021-44228)

<b>Java Version:</b> 1.8  
<b>Spring Boot Version:</b> 2.4.0  
<b> Spring Core Version:</b> 5.3.1  
<b>Log4j Version:</b> 2.13.3  

<b>Burp</b>
<img src=/ss/burp.png></img>

<b>Log</b>
<img src=/ss/log.png></img>