Log4j Vulnerability, Log4shell, Exploit, Web Attack.
A post from the folks at Blumira caught my attention as they state that web sockets are another attack vector for the infamous log4j vulnerability CVE-2021-44228 whereby it extends the attack surface to even internal systems. While their attack works as described, I was wondering if there’s more to