Apache Log4j Threatens, Well, Everything
This Security Boulevard article from December 11, 2021, covers the actively exploited Apache Log4j flaw, CVE-2021-44228, in the widely used Log4j2 Java logging library. Casey Ellis, founder and CTO at Bugcrowd, warns that the library's ubiquity and many exploit paths will complicate patching, and urges teams to immediately locate Log4j in their environments.
Source description, as published
It doesn’t get much worse than this, at least according to cybersecurity experts. The RCE bug currently being actively exploited in the widely used Apache
Inventors / authors: Teri Robinson