Finding 0-day vulnerabilities in apps using the Red Team approach

Apache Log4j2 Deserialization of Untrusted Data

CVE-2021-44228

CVE-2021-45046 is a security vulnerability that affects the Apache Web Server. Specifically, it is a path traversal vulnerability that could allow an attacker to access sensitive files and directories outside the web root directory. The vulnerability exists due to a flaw in the way that the mo…