From cbdcf59e315b2278f04ca440128ac61956acf869 Mon Sep 17 00:00:00 2001 From: Micah Silverman Date: Tue, 28 Dec 2021 17:08:20 -0500 Subject: [PATCH] updated for latest vulns --- log4shell-goof/README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/log4shell-goof/README.md b/log4shell-goof/README.md index d5552faabc..8f6b28bda6 100644 --- a/log4shell-goof/README.md +++ b/log4shell-goof/README.md @@ -2,6 +2,8 @@ The purpose of this project is to demonstrate the Log4Shell exploit with Log4J versions older than `2.15.0`. +**NOTE**: Multiple additional vulnerabilities have been disclosed with log4j. Make sure you're using the latest `2.17.x` version. + This repo is based on the excellent proof-of-concept published by [BrianV](https://github.com/bmvermeer/log4jexploit/). The PoC is a great starting point. This project expands on it by fleshing it out into a fully standalone demo.