3 ms·
Does this routing happen before or after log4j would be exploitable? Like if log4j is still running its parser and doing all the crazy stuff, but then routes to
by staticassertion 5y ago
Does this routing happen before or after log4j would be exploitable? Like if log4j is still running its parser and doing all the crazy stuff, but then routes to some other logger, it doesn't matter.
- layer8 5y agoThe routing happens before. The vulnerability is due to processing in the log4j back-end, after normal message formatting.
- staticassertion 5y agoGot it, thanks.