Understanding Log4Shell: vulnerability, attacks and mitigations by Roy van Rijn & Bert Jan Schrijver

Log4Shell (CVE-2021-44228) is a zero-day vulnerability in Log4j, a popular Java logging framework, involving arbitrary code …

source