See the reddit netsec thread [0] . There is evidence of attackers having the exploit since April 2021, thus the disclosure. > Was it spotted being abused. No,

See the reddit netsec thread [0] . There is evidence of attackers having the exploit since April 2021, thus the disclosure. > Was it spotted being abused. No, not at 2021-12-10 AFAIK, just spotted being spread. [0] https://reddit.com/r/netsec/comments/rcwws9/rce_0day_exploit_found_in_log4j_a_popular_java/ho10vin?context=3 https://reddit.com/r/netsec/comments/rcwws9/rce_0day_exploit...