Andre Bluehs

This vulnerability is actively being exploited and anyone using Log4J should update to version 2.16.0 as soon as possible. Latest version is available on the Log4J download page.

Gabriel Gabor and Andre Bluehs

A zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) was made public on December 9, 2021, that results in remote code execution (RCE).

Gabriel Gabor and Andre Bluehs

Allowing users to securely log parts of the request that match firewall rules while making it impossible for anyone else to decrypt.

Miguel de Moura and Andre Bluehs