Unverified50% confidenceFactExact time
Log4j漏洞（CVE-2021-44228）允许攻击者通过特制字符串触发JNDI查找实现无需认证的远程代码执行
1
Sources
50%
Confidence
Long-term
Relevance
7/11/2026
First Seen
Sources
Decoding the Government Software Security Executive Order: New Supply Chain Compliance and SBOM Requirements
hackernewshackernews7/9/2026
Related Claims
VerifiedLog4j漏洞于2021年被发现，编号为CVE-2021-44228，是一个远程代码执行漏洞，影响这个被广泛使用的Java日志库80% similarUnverifiedCVE-2026-55040 allows an attacker to achieve remote code execution as an arbitrary user without authentication.75% similarUnverifiedCVE-2020-9906 is a remotely exploitable memory corruption vulnerability that allows an attacker within physical proximity to achieve code execution without any user interaction.74% similarUnverifiedCVE-2021-44228 is the well-known Log4Shell vulnerability70% similarUnverifiedJadePuffer攻击的入口是Langflow的一个未授权代码执行漏洞，允许无需身份认证在目标服务器上执行任意代码66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/484128API
curl https://kongchang.com/api/v1/knowledge/claims/484128MCP
get_claim(id=484128)