{"product_id":"log4shell-shirt-cve-2021-44228-log4j-graphic-tee-unhacked","title":"EXHIBIT 0009 — LOG4SHELL","description":"\u003cp\u003eThe payload was a string. The thing that ran it was the logger.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eLog4j 2 supported lookups — small substitutions resolved inside a logged message. One of them was JNDI, which could fetch an object from a remote directory service. Put the right string anywhere that would eventually be written to a log, and Log4j would go and get that object, and run it.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eAnywhere meant anywhere. A User-Agent header. A username on a failed login. A Minecraft chat message. The name of an iPhone.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eNo authentication, no prior access, and no unusual traffic. Versions 2.0-beta9 through 2.14.1 — which was most of them, in most of the Java software in the world. It scored a full 10.0.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eIt was reported to Apache on 24 November 2021 and went public on 9 December, which is why a large number of people remember precisely where they were that weekend.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe lesson everyone took was about dependencies. The more uncomfortable one is about logging: the system built to record what happened was the system that carried it out.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eEXHIBIT 0009 \/ LOG4SHELL \/ 2021\u003c\/p\u003e","brand":"Printify","offers":[{"title":"Charcoal \/ S","offer_id":54505694200092,"sku":"28603956523507679662","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ S","offer_id":54505694232860,"sku":"97259831246827995335","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ S","offer_id":54505694265628,"sku":"24394186347532364358","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ S","offer_id":54505694298396,"sku":"12016636016197147127","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ S","offer_id":54505694331164,"sku":"22274647829986168022","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ M","offer_id":54505694363932,"sku":"30616290131947835900","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ M","offer_id":54505694396700,"sku":"19685692587279468792","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ M","offer_id":54505694429468,"sku":"75816151560572144360","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ M","offer_id":54505694462236,"sku":"27061038996146014545","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ M","offer_id":54505694495004,"sku":"31490588519596326274","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ L","offer_id":54505694527772,"sku":"76197133056108380619","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ L","offer_id":54505694560540,"sku":"14564156842296062794","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ L","offer_id":54505694593308,"sku":"27827689113671278465","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ L","offer_id":54505694626076,"sku":"20004939025171982546","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ L","offer_id":54505694658844,"sku":"28207180810743753677","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ XL","offer_id":54505694691612,"sku":"20978194786735649283","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ XL","offer_id":54505694724380,"sku":"25194546958389722065","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ XL","offer_id":54505694757148,"sku":"11847948017810270037","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ XL","offer_id":54505694789916,"sku":"17556591507733317492","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ XL","offer_id":54505694822684,"sku":"10601275142493460316","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 2XL","offer_id":54505694855452,"sku":"31361679040949828981","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 2XL","offer_id":54505694888220,"sku":"32967490742122637952","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 2XL","offer_id":54505694920988,"sku":"33167781480292030051","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 2XL","offer_id":54505694953756,"sku":"15131356731132821346","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 2XL","offer_id":54505694986524,"sku":"10001549350188944163","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 3XL","offer_id":54505695019292,"sku":"20732582287972841567","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 3XL","offer_id":54505695052060,"sku":"21707463974567143142","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 3XL","offer_id":54505695084828,"sku":"15451989176715480489","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 3XL","offer_id":54505695117596,"sku":"20451463087954731848","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 3XL","offer_id":54505695150364,"sku":"24008055660967919403","price":24.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0961\/8184\/6300\/files\/14966570103030611862_2048.jpg?v=1788370886","url":"https:\/\/unhacked.shop\/products\/log4shell-shirt-cve-2021-44228-log4j-graphic-tee-unhacked","provider":"Unhacked","version":"1.0","type":"link"}