3 ms·
Does anyone know the details of how this got discovered and released? It definitely doesn’t sound like a normal responsible disclosure process if it was discove
by mcintyre1994 5y ago
Does anyone know the details of how this got discovered and released? It definitely doesn’t sound like a normal responsible disclosure process if it was discovered a few hours before this post. Was it spotted being abused?
- dontchooseanick 5y agoSee the reddit netsec thread [0] . There is evidence of attackers having the exploit since April 2021, thus the disclosure. > Was it spotted being abused. No, not at 2021-12-10 AFAIK, just spotted being spread. [0] https://reddit.com/r/netsec/comments/rcwws9/rce_0day_exploit_found_in_log4j_a_popular_java/ho10vin?context=3 https://reddit.com/r/netsec/comments/rcwws9/rce_0day_exploit...