Vulnerability (CVE)
On Dec. 9, 2021, a remote code execution vulnerability in Apache Log4j 2 (CVE-2021-44228) was identified being exploited in the wild, with public proof-of-concept code released and exploitation described as incredibly easy to perform via a specially...
An exploit for a critical zero-day in Apache Log4j2, named Log4Shell, was disclosed on December 9, 2021, affecting all versions from 2.0-beta9 through 2.15.0 and allowing remote code execution with system-level privileges, rated CVSS 10.0. Apache fixed it...
A month after the Log4Shell vulnerability (CVE-2021-44228) was announced in early December 2021, GreyNoise still observed a significant volume of Log4j-related traffic, primarily generic JNDI string exploit attempts with known obfuscations. During the...