Log4Shell (2021 exploit)

Attachments

2023-07-27 LF OS Congress (Geneva)
A small piece of the internet broke in a very dangerous way, and that probably doesn’t seem so bad, but you know how your flat pack furniture is held together almost entirely with wooden dowels? It’s like that, but we’ve just found out the dowels are C-4.
On December 9, 2021, a zero-day arbitrary code execution vulnerability in Log4j 2 was reported and given the descriptor "Log4Shell".[8] It has been characterized as "the single biggest, most critical vulnerability of the last decade".
The ‘most serious’ security breach ever is unfolding right now. Here’s what you need to know.
What's the Deal with the Log4Shell Security Nightmare?
Zero-day in ubiquitous Log4j tool poses a grave threat to the Internet