Skip to content

Instantly share code, notes, and snippets.

@funkman
Created December 15, 2021 16:26
Show Gist options
  • Save funkman/76f55332a756ba9fc05e606bf63c2503 to your computer and use it in GitHub Desktop.
Save funkman/76f55332a756ba9fc05e606bf63c2503 to your computer and use it in GitHub Desktop.
Remove JNDI classes from log4j-core-2X via zip (Info-ZIP) CVE-2021-44228 + CVE-2021-45046 mitigation
zip -d log4j-core-2.14.0.jar 'org/apache/logging/log4j/core/net/JndiManager.class' 'org/apache/logging/log4j/core/util/JndiCloser.class' 'org/apache/logging/log4j/core/selector/JndiContextSelector.class' 'org/apache/logging/log4j/core/net/JndiManager$1.class' 'org/apache/logging/log4j/core/lookup/JndiLookup.class' 'org/apache/logging/log4j/core/net/JndiManager$JndiManagerFactory.class'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment