| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:b379c7bc-8b2f-167e-f4cc-21d24391c2af |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | EC68:39FFB3:23F0547:33D87E5:6A4D14FD |
| html-safe-nonce | b7193a6109ffcf594198ef80043ffd0e86a150f9f40b391c972ab3c2258768cd |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFQzY4OjM5RkZCMzoyM0YwNTQ3OjMzRDg3RTU6NkE0RDE0RkQiLCJ2aXNpdG9yX2lkIjoiMzI5NzY3OTU1NTI1OTM0MDAyOSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 149505452ba88d0dcad77f0cb80746bb2648c905e532899dafd87122bd0a2dab |
| hovercard-subject-tag | pull_request:800074024 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/7354/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/ea6590c7088f1a85c15b3a00f3a13f778246cbcd6ad5a5fa06d97ccc0d965c46/github/codeql/pull/7354 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/ea6590c7088f1a85c15b3a00f3a13f778246cbcd6ad5a5fa06d97ccc0d965c46/github/codeql/pull/7354 |
| og:image:alt | This is an experimental query for detecting CVE-2021-44228. |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | atorralba |
| hostname | github.com |
| expected-hostname | github.com |
| None | bcb4661e6fb4fe8b394c51ea02ccdb2236d40dc59afc75a3bbba50bf6517134c |
| turbo-cache-control | no-cache |
| go-import | github.com/github/codeql git https://github.com/github/codeql.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 143040428 |
| octolytics-dimension-repository_nwo | github/codeql |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 143040428 |
| octolytics-dimension-repository_network_root_nwo | github/codeql |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | fb70bd3c4b2bec429781b65419e912c66e2d5581 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/github/codeql/pull/7354#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F7354 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F7354 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql |
| Reload | https://github.com/github/codeql/pull/7354 |
| Reload | https://github.com/github/codeql/pull/7354 |
| Reload | https://github.com/github/codeql/pull/7354 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
|
github
| https://github.com/github |
| codeql | https://github.com/github/codeql |
|
Notifications
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Fork
2k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Star
9.8k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Code
| https://github.com/github/codeql |
|
Issues
987
| https://github.com/github/codeql/issues |
|
Pull requests
424
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
0
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
|
Code
| https://github.com/github/codeql |
|
Issues
| https://github.com/github/codeql/issues |
|
Pull requests
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
| smowton | https://github.com/smowton |
| github:main | https://github.com/github/codeql/tree/main |
| atorralba:atorralba/log4j-rce-experimental-query | https://github.com/atorralba/codeql/tree/atorralba/log4j-rce-experimental-query |
| Conversation | https://github.com/github/codeql/pull/7354 |
| Commits5 (5) | https://github.com/github/codeql/pull/7354/commits |
| Checks | https://github.com/github/codeql/pull/7354/checks |
| Files changed | https://github.com/github/codeql/pull/7354/files |
| Java: Experimental query for Log4j JNDI Injection | https://github.com/github/codeql/pull/7354#top |
| smowton | https://github.com/smowton |
| github:main | https://github.com/github/codeql/tree/main |
| atorralba:atorralba/log4j-rce-experimental-query | https://github.com/atorralba/codeql/tree/atorralba/log4j-rce-experimental-query |
|
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| Dec 10, 2021 | https://github.com/github/codeql/pull/7354#issue-1077031089 |
| CVE-2021-44228 | https://github.com/advisories/GHSA-jfh8-c2jp-5v3q |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
|
| https://github.com/atorralba |
| [Java] Query for Log4j JNDI Injection | https://github.com/github/codeql/pull/7354/commits/43a10457dd465a0253f4b1e7316ff17091263cd2 |
| 43a1045 | https://github.com/github/codeql/pull/7354/commits/43a10457dd465a0253f4b1e7316ff17091263cd2 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| code owner | https://github.com/github/codeql/blob/d8857c7ce8db25bf3f66504eecc17d01f3c835fe/CODEOWNERS#L11 |
| December 10, 2021 16:39 | https://github.com/github/codeql/pull/7354#event-5748900782 |
| https://github.com/apps/github-actions |
| github-actions | https://github.com/apps/github-actions |
|
documentation
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation |
|
Java
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJava |
| Dec 10, 2021 | https://github.com/github/codeql/pull/7354#event-5748902304 |
| https://github.com/fproulx |
| fproulx | https://github.com/fproulx |
| Dec 11, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-991417532 |
| @atorralba | https://github.com/atorralba |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/Marcono1234 |
| Marcono1234 | https://github.com/Marcono1234 |
|
Dec 11, 2021
| https://github.com/github/codeql/pull/7354#pullrequestreview-829457082 |
|
View reviewed changes
| https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.qhelp | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-67fce05320063e3b3187857fa083ac4a75e636bc253a36f277a1518ad7333851 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-c87c9c5a74ba94cb105e161c4d11190f6ea16f301da6e98c2779209abb3196cc |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-c87c9c5a74ba94cb105e161c4d11190f6ea16f301da6e98c2779209abb3196cc |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/Marcono1234 |
| Marcono1234 | https://github.com/Marcono1234 |
| Dec 11, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-991468987 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| #7054 | https://github.com/github/codeql/pull/7054 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/securingdev |
| securingdev | https://github.com/securingdev |
| Dec 13, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-992732565 |
| this open source query | https://github.com/cldrn/codeql-queries/blob/master/log4j-injection.ql |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/sj |
| sj | https://github.com/sj |
|
Dec 13, 2021
| https://github.com/github/codeql/pull/7354#pullrequestreview-830574562 |
|
View reviewed changes
| https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2 |
| sj | https://github.com/sj |
| https://github.com/github/codeql/pull/7354#pullrequestreview-830574562 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.qhelp | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-67fce05320063e3b3187857fa083ac4a75e636bc253a36f277a1518ad7333851 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.qhelp | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-67fce05320063e3b3187857fa083ac4a75e636bc253a36f277a1518ad7333851 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.qhelp | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-67fce05320063e3b3187857fa083ac4a75e636bc253a36f277a1518ad7333851 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.qhelp | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-67fce05320063e3b3187857fa083ac4a75e636bc253a36f277a1518ad7333851 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.qhelp | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-67fce05320063e3b3187857fa083ac4a75e636bc253a36f277a1518ad7333851 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.qhelp | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-67fce05320063e3b3187857fa083ac4a75e636bc253a36f277a1518ad7333851 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.qhelp | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-67fce05320063e3b3187857fa083ac4a75e636bc253a36f277a1518ad7333851 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-c87c9c5a74ba94cb105e161c4d11190f6ea16f301da6e98c2779209abb3196cc |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
|
Dec 13, 2021
| https://github.com/github/codeql/pull/7354#pullrequestreview-830611506 |
|
View reviewed changes
| https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2 |
| https://github.com/sj |
| sj | https://github.com/sj |
|
Dec 13, 2021
| https://github.com/github/codeql/pull/7354#pullrequestreview-830613382 |
|
View reviewed changes
| https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql | https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2#diff-c87c9c5a74ba94cb105e161c4d11190f6ea16f301da6e98c2779209abb3196cc |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| smowton | https://github.com/smowton |
| stale review | https://github.com/github/codeql/pull/7354#pullrequestreview-830611506 |
| d2dc199 | https://github.com/github/codeql/commit/d2dc19900f353606e48cc332c112d405ca784c5d |
| December 13, 2021 18:39 | https://github.com/github/codeql/pull/7354#event-5758927156 |
|
| https://github.com/atorralba |
|
| https://github.com/sj |
|
| https://github.com/Marcono1234 |
| Apply suggestions from code review | https://github.com/github/codeql/pull/7354/commits/d2dc19900f353606e48cc332c112d405ca784c5d |
| d2dc199 | https://github.com/github/codeql/pull/7354/commits/d2dc19900f353606e48cc332c112d405ca784c5d |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
|
Dec 13, 2021
| https://github.com/github/codeql/pull/7354#pullrequestreview-830620703 |
|
View reviewed changes
| https://github.com/github/codeql/pull/7354/files/d2dc19900f353606e48cc332c112d405ca784c5d |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.qhelp | https://github.com/github/codeql/pull/7354/files/d2dc19900f353606e48cc332c112d405ca784c5d#diff-67fce05320063e3b3187857fa083ac4a75e636bc253a36f277a1518ad7333851 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
|
| https://github.com/atorralba |
|
| https://github.com/sj |
| Apply suggestions from code review | https://github.com/github/codeql/pull/7354/commits/ff2f5a5f91c3c5c0a89afddad5f1e1f7458f4351 |
| ff2f5a5 | https://github.com/github/codeql/pull/7354/commits/ff2f5a5f91c3c5c0a89afddad5f1e1f7458f4351 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| Dec 13, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-992771662 |
| @Marcono1234 | https://github.com/Marcono1234 |
| @sj | https://github.com/sj |
| #7054 | https://github.com/github/codeql/pull/7054 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| Dec 13, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-992773862 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| this open source query | https://github.com/cldrn/codeql-queries/blob/master/log4j-injection.ql |
| @securingdev | https://github.com/securingdev |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/securingdev |
| securingdev | https://github.com/securingdev |
| Dec 13, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-992784337 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| Dec 13, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-992800381 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| catching | https://logging.apache.org/log4j/2.x/log4j-api/apidocs/org/apache/logging/log4j/Logger.html#catching-org.apache.logging.log4j.Level-java.lang.Throwable- |
| throwing | https://logging.apache.org/log4j/2.x/log4j-api/apidocs/org/apache/logging/log4j/Logger.html#throwing-org.apache.logging.log4j.Level-T- |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
|
Dec 13, 2021
| https://github.com/github/codeql/pull/7354#pullrequestreview-830673563 |
|
View reviewed changes
| https://github.com/github/codeql/pull/7354/files/ff2f5a5f91c3c5c0a89afddad5f1e1f7458f4351 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql | https://github.com/github/codeql/pull/7354/files/ff2f5a5f91c3c5c0a89afddad5f1e1f7458f4351#diff-c87c9c5a74ba94cb105e161c4d11190f6ea16f301da6e98c2779209abb3196cc |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
|
Dec 13, 2021
| https://github.com/github/codeql/pull/7354#pullrequestreview-830674153 |
|
View reviewed changes
| https://github.com/github/codeql/pull/7354/files/ff2f5a5f91c3c5c0a89afddad5f1e1f7458f4351 |
| java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql | https://github.com/github/codeql/pull/7354/files/ff2f5a5f91c3c5c0a89afddad5f1e1f7458f4351#diff-c87c9c5a74ba94cb105e161c4d11190f6ea16f301da6e98c2779209abb3196cc |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| atorralba | https://github.com/atorralba |
| December 13, 2021 20:38 | https://github.com/github/codeql/pull/7354#commits-pushed-1b761b3 |
|
| https://github.com/atorralba |
| Apply suggestions from code review | https://github.com/github/codeql/pull/7354/commits/1b761b3d12019a48d0d84d2b97665dbf5f46c49f |
| 1b761b3 | https://github.com/github/codeql/pull/7354/commits/1b761b3d12019a48d0d84d2b97665dbf5f46c49f |
|
| https://github.com/atorralba |
| Autoformat | https://github.com/github/codeql/pull/7354/commits/aee617f91199772a7bf8d316cb634cca698fc500 |
| aee617f | https://github.com/github/codeql/pull/7354/commits/aee617f91199772a7bf8d316cb634cca698fc500 |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
|
Dec 14, 2021
| https://github.com/github/codeql/pull/7354#pullrequestreview-831370072 |
|
View reviewed changes
| https://github.com/github/codeql/pull/7354/files/aee617f91199772a7bf8d316cb634cca698fc500 |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
| 85ff57b | https://github.com/github/codeql/commit/85ff57bae6b6e50e510007fd4779ecf09dcdbf7f |
| Dec 14, 2021 | https://github.com/github/codeql/pull/7354#event-5763457688 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| December 14, 2021 11:36 | https://github.com/github/codeql/pull/7354#event-5763479435 |
| https://github.com/sj |
| sj | https://github.com/sj |
|
Dec 14, 2021
| https://github.com/github/codeql/pull/7354#ref-pullrequest-1079703818 |
|
Clarify Log4jJndiInjection.ql query name and help
#7388
| https://github.com/github/codeql/pull/7388 |
| https://github.com/ambiso |
| ambiso | https://github.com/ambiso |
| Dec 15, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-994554294 |
| CVE-2021-44228 | https://github.com/advisories/GHSA-jfh8-c2jp-5v3q |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/sj |
| sj | https://github.com/sj |
| Dec 15, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-994806157 |
| might generally want to avoid | https://owasp.org/www-community/attacks/Log_Injection |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/securingdev |
| securingdev | https://github.com/securingdev |
| Dec 15, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-995179148 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| CVE-2021-45046 | https://nvd.nist.gov/vuln/detail/CVE-2021-45046 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| Dec 15, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-995243537 |
| CVE-2021-45046 | https://nvd.nist.gov/vuln/detail/CVE-2021-45046 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/Marcono1234 |
| Marcono1234 | https://github.com/Marcono1234 |
| Dec 16, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-995316558 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| @ambiso | https://github.com/ambiso |
| mentioned by atorralba | https://github.com/github/codeql/pull/7354#issuecomment-992771662 |
| Log4j 2 security notes | https://logging.apache.org/log4j/2.x/security.html |
| CVE-2021-45046 | https://github.com/advisories/GHSA-7rjr-3q55-vv33 |
| https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/ | https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/ |
| https://logging.apache.org/log4j/2.x/manual/lookups.html | https://logging.apache.org/log4j/2.x/manual/lookups.html |
| CVE-2021-45046 | https://github.com/advisories/GHSA-7rjr-3q55-vv33 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| Dec 16, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-995541465 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| CVE-2021-45046 | https://github.com/advisories/GHSA-7rjr-3q55-vv33 |
| here | https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/#notes-on-the-denial-of-service-in-2150 |
| @Marcono1234 | https://github.com/Marcono1234 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| Dec 16, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-995568522 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| third vulnerability | https://www.praetorian.com/blog/log4j-2-15-0-stills-allows-for-exfiltration-of-sensitive-data/ |
| CVE-2021-45046 | https://github.com/advisories/GHSA-7rjr-3q55-vv33 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/sirdarckcat |
| sirdarckcat | https://github.com/sirdarckcat |
| Dec 16, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-995608343 |
| @atorralba | https://github.com/atorralba |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.com/atorralba |
| atorralba | https://github.com/atorralba |
| Dec 16, 2021 | https://github.com/github/codeql/pull/7354#issuecomment-995786408 |
| #7423 | https://github.com/github/codeql/pull/7423 |
| CVE-2021-45046 | https://github.com/advisories/GHSA-7rjr-3q55-vv33 |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F7354 |
|
| https://github.com/smowton |
|
smowton
| https://github.com/smowton |
|
| https://github.com/github/codeql/pull/7354/files/aee617f91199772a7bf8d316cb634cca698fc500 |
|
| https://github.com/sj |
|
sj
| https://github.com/sj |
|
| https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2 |
|
| https://github.com/Marcono1234 |
|
Marcono1234
| https://github.com/Marcono1234 |
|
| https://github.com/github/codeql/pull/7354/files/43a10457dd465a0253f4b1e7316ff17091263cd2 |
|
documentation
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation |
|
Java
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJava |
| Please reload this page | https://github.com/github/codeql/pull/7354 |
|
| https://github.com/atorralba |
|
| https://github.com/fproulx |
|
| https://github.com/Marcono1234 |
|
| https://github.com/securingdev |
|
| https://github.com/ambiso |
|
| https://github.com/sj |
|
| https://github.com/sirdarckcat |
|
| https://github.com/smowton |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |