log4j-detector
log4j-detector copied to clipboard
mergebase
A public open sourced tool. Log4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any application. It is able to even find Log4J instan...
This fix will resolve reload4j jars reported as log4j-1.x
Hi, I tried installing ActiveMQ 5.16.4 which comes with reload4j-1.2.19, now running the detector shows the following output: ``` -- github.com/mergebase/log4j-detector v2021.12.29 (by mergebase.com) analyzing paths (could take a while)....
After 1 Minute of Code Review, I found this weird line. Does nobody look at the code, before using it (with admin privilidges)?
Exploded jar files (*.class) are not detected on a Windows 10 platform. Detection works properly under WSL and native Linux. Tests were performed on all platforms against the same set...
Dear Mergebase / Dear @juliusmusseau , we had the pleasure to use your log4j-detector tool as complentary scanning tool and would like to contribute some improvements as Pull Request (from...
Dear Mergebase / Dear @juliusmusseau , we had the pleasure to use your log4j-detector tool as complentary scanning tool and would like to contribute some improvements as Pull Request (from...
The tool handles everything with file suffix *ar as a potential Java archive: System.err output on an example with *.gwtar -- Problem: D:\.m2\repository\com\google\gwt\gwt-user\2.7.0\gwt-user-2.7.0.jar!/com/google/gwt/user/User.gwtar - java.lang.RuntimeException: Inner-zip - could not find...
While starting the scan from /home/\ On WSL running Ubuntu 20.04 an `OutOfMemory` occurs after starting hundreds of threads (my guess is for each recursive subdirectory) after a couple of...
Script detects e.g. bea/user_projects/myproject/applications/jobScheduler.war when actual path is /home/user/proj/bea/user_projects/myproject/applications/jobScheduler.war I'm not sure why the path gets cropped there and not on any other subdirectory. There is a mountpoint /home and...
