2 ms·
Patch fixing critical Log4j 0-day has its own vulnerability that’s under exploit
- usrbinbash 5y agoJust a quick question from someone who left Java behind a long time ago: Can anyone explain to me why in hell a logging-framework needs the capability to load code from a remote server in the first place?