Contact us: info@tenendo.com
JNDI injection. JDBC
Preventing JNDI injection vulnerabilities by using a source code review is always a good idea.
Spring4Shell as a class injection example
Two serious vulnerabilities leading to remote code execution (RCE) have been found in the popular Spring framework, one in Spring Core and the other in Spring Cloud Functions.
JNDI injection
Java Naming and Directory Interface (JNDI) is a Java API that allows clients to discover and look up data and objects via a name.
JNDI injection. Log4Shell case study
On December 10, 2021, Apache released a fix for CVE-2021-44228, a critical RCE vulnerability affecting Log4j that is being exploited in the wild.