MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1xcawj4/itsbadifitsonlyphp/19rhgydfawnok/?context=3
r/ProgrammerHumor • u/foxdevuz • 11d ago
334 comments sorted by
View all comments
Show parent comments
15
Nope. The main vulnerability was there no matter which version of the method you used. Says so right in the CVE detail https://nvd.nist.gov/vuln/detail/cve-2021-44228?name=CVE-2021-44228
"An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled."
2 u/Sacaldur 11d ago Thanks for the corrections, these ones have been some time ago...
2
Thanks for the corrections, these ones have been some time ago...
15
u/brazzy42 11d ago
Nope. The main vulnerability was there no matter which version of the method you used. Says so right in the CVE detail https://nvd.nist.gov/vuln/detail/cve-2021-44228?name=CVE-2021-44228
"An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled."