Hackers vs. Developers // CVE-2021-44228 Log4Shell

Let’s try to make sense of the Log4j vulnerability. First we look at the Log4j features and JNDI, and then we explore the history of the recent log4shell vulnerability. This is part 1 of a two part series into log4j. Log4j Issues: 2013: 2014: 2017: Log4j 2 Security: German Government Warning: Cloudflare: A JOURNEY FROM JNDI/LDAP MANIPULATION TO REMOTE CODE EXECUTION DREAM LAND: whitepaper: