Framework and logging injection payloads missing
The list lacks injection payloads for popular frameworks and logging libraries, such as template curly braces and Log4j lookup syntax.
Tier II · Emerging Problems that are still building up.
3 public reports · first reported 2 November 2016 · last reported 26 July 2024
What's going wrong
Developers using web frameworks and Java logging libraries report that the list does not include the template and lookup syntax that has caused real incidents.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 3 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.