> abusing the logging The log4j attack was code injection[1] exploit resulting from interpreting unsanitized data from untrusted parties. In that respect it fa

> abusing the logging The log4j attack was code injection[1] exploit resulting from interpreting unsanitized data from untrusted parties. In that respect it falls roughly in the same umbrella as SQL injection. There are many tools or libraries that define some kind of little language to allow for scripting or executing some action. 1 https://owasp.org/www-community/attacks/Code_Injection https://owasp.org/www-community/attacks/Code_Injection