/log4shell-war-fixer

Shell script to remove JndiLookup class from Log4J 2 jar file, inside WAR file, in order to mitigate CVE-2021-44228, a.k.a., #Log4Shell

Primary LanguageShell

log4shell-war-fixer

Linux shell script that patches a WAR file from #Log4Shell vulnerability (CVE-2021-44228).

It looks for Log4j 2 jar file inside WAR file and remove JndiLookup.class if needed.

Usage:

user@host:~$ ./log4shell-war-fixer.sh my-vuln-app.war

Usage