sanjog152 / log4jkongwaf

This plugin will mitigate CVE2021-44228 in Kong layer

Log4JKongWAF

This plugin will mitigate CVE2021-44228 in Kong layer

ref nginx plugin: https://github.com/tippexs/nginx-njs-waf-cve2021-44228

How to use it.

Use this plugin as Kong Cluster Plugin

In DBless mode.

apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  name: <object name>
  namespace: <object namespace>
  labels:
    global: "true"
config:             
  enabled: value
plugin: Log4jKongWaf

log4jkongwaf's Issues

Handler.lua would return a Boolean in case the cve_found is set

Log4JKongWAF/handler.lua

Line 35 in 18c2cb2

cve_found = 1

Suggestions:
@sanjog152 would it not be helpful if you returned the vulnerability id as well from handler.lua? Just a thought