A serious Log4J flaw puts much of the internet at risk

The Apache Software Foundation has issued patches to address a frequently leveraged zero-day flaw in the Apache Log4j Java-based logging library that might be used to launch malicious code and gain full control of susceptible systems.
The bug, dubbed CVE-2021–44228 and known as Log4Shell or LogJam, involves an unauthenticated, remote code execution (RCE) on any…