[[Java]] > [[Log4j]] > [[Log4j2]] - https://logging.apache.org/log4j/2.x/ * Log4shell [#p5d99162] - http://slf4j.org/log4shell.html - https://logging.apache.org/log4j/2.x/manual/lookups.html#JndiLookup - https://github.com/YfryTchsGD/Log4jAttackSurface - 「やばすぎる」 Javaライブラリ「Log4j」にゼロデイ脆弱性、任意のリモートコードを実行可能 iCloudやSteam、Minecraftなど広範囲のJava製品に影響か -- https://www.itmedia.co.jp/news/articles/2112/10/news157.html - https://www.lunasec.io/docs/blog/log4j-zero-day/ - [[JNDI]] *. [#paab5636] - https://www.ralphgoers.com/post/why-was-log4j-2-created |