What is Log4Shell?
'''Log4shell''' (CVE-2021-44228), is a zero-day [[vulnerability]] in Log4j, a logging tool in [[Java (programming language)|Java]]. People have figured out that you can abuse this vulnerability to execute [[remote code]]. On 24 November 2021, Chen Zhaojun of [[Alibaba's Cloud]]'s security team told Apache about this. It has been publicly disclosed since December 9, 2021.<ref>{{Cite news|last=Newman|first=Lily|date=2021-12-10|title=‘The Internet Is on Fire’|work=Wired|url=https://www.wired.com/story/log4j-flaw-hacking-internet/|access-date=2021-12-23}}</ref> Apache has given this vulnerability a 10, the highest rating. ==References== {{reflist}} [[Category:JavaScript]]