cve info derived

{
  "input": {
    "body": {
      "identifier": "CVE-2021-44228"
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "id": "CVE-2021-44228",
      "cvss": [
        "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
      ],
      "title": "Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints",
      "source": "CVE® (MITRE), from the official CVE Services API.",
      "status": "PUBLISHED",
      "license": "Copyright © 1999-2026, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. License: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly di…",
      "affected": [
        {
          "product": "Apache Log4j2",
          "provider": "Apache Software Foundation",
          "versions": [
            "2.0-beta9 < log4j-core*"
          ]
        }
      ],
      "modified": "2025-10-21T23:25:23.121Z",
      "severity": "CRITICAL",
      "published": "2021-12-10T00:00:00.000Z",
      "references": [
        "https://logging.apache.org/log4j/2.x/security.html",
        "http://www.openwall.com/lists/oss-security/2021/12/10/1"
      ],
      "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message p…"
    }
  }
}