From b5e245b098752c0f442124ffc1c1264caec14366 Mon Sep 17 00:00:00 2001 From: breadchris Date: Fri, 17 Dec 2021 04:10:13 -0500 Subject: [PATCH] update date --- ...4-log4j-zero-day-update-on-CVE-2021-45046.mdx | 2 +- .../2021-12-18-log4j-update-increased-cvss.mdx | 8 ++++---- docs/typedoc-sidebar.js | 16 ++++++++++++++++ 3 files changed, 21 insertions(+), 5 deletions(-) diff --git a/docs/blog/2021-12-14-log4j-zero-day-update-on-CVE-2021-45046.mdx b/docs/blog/2021-12-14-log4j-zero-day-update-on-CVE-2021-45046.mdx index e31558fa6..9b3ff629e 100644 --- a/docs/blog/2021-12-14-log4j-zero-day-update-on-CVE-2021-45046.mdx +++ b/docs/blog/2021-12-14-log4j-zero-day-update-on-CVE-2021-45046.mdx @@ -1,5 +1,5 @@ --- -title: "Log4Shell Update: Second log4j Vulnerability Published (CVE-2021-44228 + )" +title: "Log4Shell Update: Second log4j Vulnerability Published (CVE-2021-44228 + CVE-2021-45046)" description: A quick update on the situation now that a new log4j CVE has been created and patched in 2.16.0. We've done research and these are our findings. slug: log4j-zero-day-update-on-cve-2021-45046 date: 2021-12-14 diff --git a/docs/blog/2021-12-18-log4j-update-increased-cvss.mdx b/docs/blog/2021-12-18-log4j-update-increased-cvss.mdx index 48cdb69dc..27882d8ac 100644 --- a/docs/blog/2021-12-18-log4j-update-increased-cvss.mdx +++ b/docs/blog/2021-12-18-log4j-update-increased-cvss.mdx @@ -1,8 +1,8 @@ --- title: "Log4Shell Update: Severity Upgraded 3.7 -> 9.0 for Second log4j Vulnerability (CVE-2021-45046)" -description: . -slug: log4j-zero-day-update-on-cve-2021-45046 -date: 2021-12-14 +description: The second Log4j vulnerability was upgraded from a CVSS score of 3.7x (limited DOS) to a CVSS score of 9.7 (limited RCE), and we explain the impact. +slug: log4j-zero-day-severity-of-cve-2021-45046-increased +date: 2021-12-18 image: https://www.lunasec.io/docs/img/log4shell-logo.png keywords: [log4shell, log4j, log4j2, rce, java, zero-day, mitigation] authors: @@ -68,7 +68,7 @@ with a limited 3.7 (now 9.0). In this post, we're going to talk about the impact of these changes and why the CVSS score has changed so drastically. - + ## Understanding the new Bypass diff --git a/docs/typedoc-sidebar.js b/docs/typedoc-sidebar.js index e99a55768..fc44d7472 100644 --- a/docs/typedoc-sidebar.js +++ b/docs/typedoc-sidebar.js @@ -1 +1,17 @@ +/* + * Copyright 2021 by LunaSec (owned by Refinery Labs, Inc) + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + * + */ module.exports=[{type:'autogenerated',dirName:'cli-config'}]; \ No newline at end of file