java there's a major security exploit

by **Procne** » Fri Jan 14, 2022 2:15 pm

Even if the client used log4j, what could that exploit do?
It's a problem for java-backed app/web servers, where user input may result in some shady calls from the server.

With haven client what could you do with it - if you type specific phrase you will make the client, ran locally on your pc, make some calls?

by **telum12** » Fri Jan 14, 2022 2:37 pm

Procne wrote:Even if the client used log4j, what could that exploit do?
It's a problem for java-backed app/web servers, where user input may result in some shady calls from the server.

With haven client what could you do with it - if you type specific phrase you will make the client, ran locally on your pc, make some calls?

It’s arbitrary code exec. It would only be bad if something from chat or some such was logged

by **Procne** » Fri Jan 14, 2022 3:24 pm

ah, true, chat from other players

by **vatas** » Fri Jan 14, 2022 3:47 pm

https://www.gamesradar.com/amazon-fixes ... t-exploit/

by **MagicManICT** » Fri Jan 14, 2022 11:31 pm

jorb wrote:We do not use log4j, and are not at risk from this exploit.

Thanks. Moving this thread to The Inn since it has no direct impact on Haven.

java there's a major security exploit

Re: java there's a major security exploit

Re: java there's a major security exploit

Re: java there's a major security exploit

Re: java there's a major security exploit

Re: java there's a major security exploit

Who is online