arsalanraja987/java-log4j-cve-2020-9488

PoC

Demo of CVE-2020-9488: Unsafe logging with Log4j and remediation

view exploit source poc_in_githubauthor arsalanraja987published 2025-07-07catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-9488USlow3.7Exploit
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which coul…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan