habr

Использование log4j для записи объектов в базу

Многие Java разработчики используют в своих приложениях библиотеку log4j для логирования. Иногда возникает необходимость писать логи в базу ...
Хакер Online

По следам Log4shell. Разбираем две уязвимости, оставшиеся в тени

Еще в декаб­ре 2021-го, ког­да были най­дены и зак­рыты четыре уяз­вимос­ти Log4shell в Log4J, ока­залось, что их на самом деле боль­ше. Две из них ...
GitHub

jqassistant-tutorials/log4j-artifact-repository-analysis

As a pre-condition the repositories must provide an index. This can be activated in the administration of the repository manager. mvn verify -Drepo.url=http://host ...
GIGAZINE

Why does the vulnerability 'Log4Shell (CVE-2021-44228)' found in Java's Log4j library have a major impact on the world?

A version of Apache Log4j, a Java log output library, that fixes the zero-day vulnerability 'CVE-2021-44228 ', commonly known as ' Log4Shell ', for remote code execution will be released on December ...
CSOonline

Apache Log4j vulnerability actively exploited, impacting millions of Java-based apps

The vulnerability affects not only Java-based applications and services that use the library directly, but also many other popular Java components and development frameworks that rely on it. Attackers ...
cisa

Mitigating Log4Shell and Other Log4j-Related Vulnerabilities

Identifying assets affected by Log4Shell and other Log4j-related vulnerabilities, Upgrading Log4j assets and affected products to the latest version as soon as patches are available and remaining ...