{"adoption": {"forks": 551, "observed_at": "2026-08-28T04:03:44.417198+00:00", "stars": 1140}, "canonical_url": "https://ross.abutalabs.com/products/log4shell-vulnerable-app", "card": {"archived": false, "artifact_type": "application", "description": "Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).", "domain": ["security", "penetration-testing", "developer-tools", "web-development"], "enriched": true, "function": ["security", "penetration-testing", "web-framework"], "health_score": 20, "homepage": null, "language": "Java", "license": "Apache-2.0", "license_family": "permissive", "maturity": "maintenance", "member_repos": ["christophetd/log4shell-vulnerable-app"], "name": "christophetd/log4shell-vulnerable-app", "platform": ["jvm", "self-hosted"], "pushed_at": "2024-04-26T03:16:26+00:00", "repo": "christophetd/log4shell-vulnerable-app", "stars": 1140, "tags": ["log4shell", "cve-2021-44228", "vulnerable-app", "security-training", "spring-boot", "exploit-demo", "docker"], "topics": ["log4shell"], "urls": [], "use_cases": ["test log4shell detection tools", "demonstrate cve-2021-44228 exploitation", "train developers on log4j vulnerability", "verify waf rules against jndi injection", "reproduce log4shell in a sandbox", "practice penetration testing on a safe target"], "what_it_is": "A deliberately vulnerable Spring Boot web application demonstrating the Log4Shell vulnerability (CVE-2021-44228) using Log4j 2.14.1. It ships as a Docker image with documented exploitation steps for security testing and education.", "when_to_avoid": ["you need a production or hardened application", "you cannot run it in an isolated sandbox environment", "you need a maintained application rather than a frozen vulnerable demo"], "when_to_choose": ["you need a safe, reproducible target to test Log4Shell detections or mitigations", "you are teaching or demonstrating how CVE-2021-44228 works", "you want to validate security tooling against a known-vulnerable app"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/log4shell-vulnerable-app", "repo": "christophetd/log4shell-vulnerable-app", "role": "main", "score": 32}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T06:35:29.170182+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "18d970916c8b8ea0e0acf930e39e21504eb1224c569becff027f3b4f5b769a6b", "fetched_at": "2026-08-28T04:03:44.417198+00:00", "kind": "readme", "missing": false, "url": "https://github.com/christophetd/log4shell-vulnerable-app"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T06:35:29.170182+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "18d970916c8b8ea0e0acf930e39e21504eb1224c569becff027f3b4f5b769a6b", "fetched_at": "2026-08-28T04:03:44.417198+00:00", "kind": "readme", "missing": false, "url": "https://github.com/christophetd/log4shell-vulnerable-app"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T06:35:29.170182+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "18d970916c8b8ea0e0acf930e39e21504eb1224c569becff027f3b4f5b769a6b", "fetched_at": "2026-08-28T04:03:44.417198+00:00", "kind": "readme", "missing": false, "url": "https://github.com/christophetd/log4shell-vulnerable-app"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T06:35:29.170182+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "18d970916c8b8ea0e0acf930e39e21504eb1224c569becff027f3b4f5b769a6b", "fetched_at": "2026-08-28T04:03:44.417198+00:00", "kind": "readme", "missing": false, "url": "https://github.com/christophetd/log4shell-vulnerable-app"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T06:35:29.170182+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "18d970916c8b8ea0e0acf930e39e21504eb1224c569becff027f3b4f5b769a6b", "fetched_at": "2026-08-28T04:03:44.417198+00:00", "kind": "readme", "missing": false, "url": "https://github.com/christophetd/log4shell-vulnerable-app"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T06:35:29.170182+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "18d970916c8b8ea0e0acf930e39e21504eb1224c569becff027f3b4f5b769a6b", "fetched_at": "2026-08-28T04:03:44.417198+00:00", "kind": "readme", "missing": false, "url": "https://github.com/christophetd/log4shell-vulnerable-app"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:03:44.417198+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T06:35:29.170182+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "18d970916c8b8ea0e0acf930e39e21504eb1224c569becff027f3b4f5b769a6b", "fetched_at": "2026-08-28T04:03:44.417198+00:00", "kind": "readme", "missing": false, "url": "https://github.com/christophetd/log4shell-vulnerable-app"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T06:35:29.170182+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "18d970916c8b8ea0e0acf930e39e21504eb1224c569becff027f3b4f5b769a6b", "fetched_at": "2026-08-28T04:03:44.417198+00:00", "kind": "readme", "missing": false, "url": "https://github.com/christophetd/log4shell-vulnerable-app"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T06:35:29.170182+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "18d970916c8b8ea0e0acf930e39e21504eb1224c569becff027f3b4f5b769a6b", "fetched_at": "2026-08-28T04:03:44.417198+00:00", "kind": "readme", "missing": false, "url": "https://github.com/christophetd/log4shell-vulnerable-app"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T06:35:29.170182+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "18d970916c8b8ea0e0acf930e39e21504eb1224c569becff027f3b4f5b769a6b", "fetched_at": "2026-08-28T04:03:44.417198+00:00", "kind": "readme", "missing": false, "url": "https://github.com/christophetd/log4shell-vulnerable-app"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_releases"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1727, "days_push": 859, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 32, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}