Apache Log4j 输入验证错误漏洞

Apache Log4j is a Java-based open source logging tool from the Apache Foundation. An injection vulnerability exists in Apache Log4j2 versions 2.0-beta7 through 2.17.0, which stems from a lack of effective protection and filtering for JDBC Appender and JNDI in the software. An attacker who has the...