4 ms·
The patch which apparently introduced the vulnerable code path landed in 2013 -- https://www.lunasec.io/docs/blog/log4j-zero-day/ https://www.lunasec.io/docs/bl
by rst 5y ago
The patch which apparently introduced the vulnerable code path landed in 2013 -- https://www.lunasec.io/docs/blog/log4j-zero-day/ https://www.lunasec.io/docs/blog/log4j-zero-day/
For context, injection attacks were on the original OWASP top 10 list from 2003.