Relative Content

Tag Archive for javaspring-bootlog4j2openjdk-21log4shell

How to allow object deserialization in Java JDK 21?

I am working on a vulnerable web application which I am integrating with Spring Boot to demonstrate Log4J vulnerability. My vulnerable web application works with my exploit on JDK 1.8. However, the exploit fails when I switch to JDK 21.