漏洞描述
Apache Log4j2 Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
securitylab.github.comhttps://securitylab.github.com/advisories/GHSL-2021-1054_GHSL-2021-1055_log4j2/↗twitter.comhttps://twitter.com/marcioalm/status/1471740771581652995↗logging.apache.orghttps://logging.apache.org/log4j/2.x/↗www.openwall.comhttp://www.openwall.com/lists/oss-security/2021/12/14/4↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-44228↗