What is Log4Shell, and why are we panicking about it? | Computer Weekly
This December 2021 article from ComputerWeekly.com explains the Log4Shell vulnerability in Apache's Log4j2 library and the alarm it triggered. Casey Ellis, chief technology officer at Bugcrowd, calls it a worst-case scenario, citing Log4j's widespread use, the many exploit paths, difficult patching, and an exploit that fits in a tweet.
Source description, as published
It's been described as a 'design failure of catastrophic proportions' that threatens the very fabric of the digital world. Find out what the Log4j2 Log4Shell panic is all about, and what you should do about it.
Inventors / authors: Alex Scroxton