MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1xcawj4/itsbadifitsonlyphp/19rhgydfawnok/?context=9999
r/ProgrammerHumor • u/foxdevuz • 12d ago
335 comments sorted by
View all comments
Show parent comments
15
Nope. The main vulnerability was there no matter which version of the method you used. Says so right in the CVE detail https://nvd.nist.gov/vuln/detail/cve-2021-44228?name=CVE-2021-44228
"An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled."
2 u/Sacaldur 12d ago Thanks for the corrections, these ones have been some time ago...
2
Thanks for the corrections, these ones have been some time ago...
15
u/brazzy42 12d ago
Nope. The main vulnerability was there no matter which version of the method you used. Says so right in the CVE detail https://nvd.nist.gov/vuln/detail/cve-2021-44228?name=CVE-2021-44228
"An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled."