Log4j Vulnerability, Log4shell, Exploit, Web Attack.
http headers though, so web sockets cannot be used for vulnerable log4j applications logging http headers. But when an application has a vulnerable http parameter web sockets can be used. Citing Blumira’s post: WebSockets are not restricted by same-origin policies like a normal cross-domain HTTP