Description
Apache log4j2存在远程代码执行漏洞，此漏洞是缺乏校验导致的。
Apache Log4j2 远程代码执行漏洞利用尝试 - HTTP Header
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.cloudflare.com/zh-cn/inside-the-log4j2-vulnerability-cve-2021-44228/
https://www.anquanke.com/post/id/262668
https://www.secrss.com/articles/37160
https://nic.nwupl.edu.cn/wlaq/yjtz/89611.htm
https://stack.chaitin.com/vuldb/detail/fcc63ba8-3aaa-4c64-bff5-98332c3d2f3f
https://www.pa55w0rd.online/log4j/
https://zhuanlan.zhihu.com/p/443689489
https://www.green-computing.com/official2/cn/newsevents/news_is_20220103.html
https://etnc.gduf.edu.cn/info/1034/1404.htm
https://developer.aliyun.com/article/888688
https://github.com/Goqi/ELong
https://www.cnblogs.com/hzhsec/p/19418078