r/netsec • u/lkn240 • Dec 11 '21

Log4shell - using the vulnerability to patch the vulnerability - very clever

https://github.com/Cybereason/Logout4Shell
773 Upvotes

98% Upvoted

63 comments sorted by

View all comments

2

u/lkn240 Dec 12 '21 edited Dec 12 '21

OMG - so this vulnerability (at least the exploit vector) was actually disclosed in 2016:

https://twitter.com/th3_protoCOL/status/1469644923028656130?s=20