Is community impacted by Log4J vulnerability?
Is Khoros community compaged by this log4j vulnerability: CVE-2021-44228
Forum Discussion
I am attempting to publish our company's response on the community but get a 403 error on it. Anyone else encountering an issue publishing a statement on the Khoros platform? It is only this post and I even stripped it down to basic formatting and can't get it to publish. It appears to be some type of block on content related to the topic?
allisonable wrote:It appears to be some type of block on content related to the topic?
It seems (after some trial and error) the phrase "jndi" plus ":" is being blocked by Khoros in all input forms generating a 403 forbidden error.
Try removing that phrase from the topic (if it's in there at all)?
allisonable & Notmark-VFZ
I think the issue you're seeing is related to Web Application Firewall (WAF) changes that may have been made on your site. We hit this with the word 'localhost'. No matter what we did, that word caused a 403 error.
After checking in with Support they asked me to review the WAF email and sure enough that was the culprit.
Check your inbox for "Khoros Web Application Firewall (WAF) rollout". If you dont have the email, I'd contact support, ask if this is WAF related based on this"While the rules and filters have been vetted and tested prior to being rolled out, due to the nature and customizability of the Community platform, there is a small risk that there could be some level of unexpected impact. Issues caused by the WAF will result in end-users receiving a 403 forbidden response to an operation. Please contact Support if you see this behavior and provide as much detail as possible about the action you were taking and the timing of that action (including time zone information)."
