Java Log4JShell Vulnerability – What I Learned About it This Week

Last Thursday, a vulnerability was disclosed in the Log4J logging library affecting many Java applications worldwide. The vulnerability is called Log4Shell (CVE-2021–44228). It allows an attacker to inject a crafted payload anywhere in the requests that get parsed and executed by the vulnerable application. There are a lot of