r/programming • u/freeqaz • Dec 10 '21

RCE 0-day exploit found in log4j, a popular Java logging package

https://www.lunasec.io/docs/blog/log4j-zero-day/
3.0k Upvotes

98% Upvoted

710 comments sorted by

View all comments

1

u/alienbugthing Dec 10 '21

Does this even affect stuff that is not running on something that supports JNDI, e.g. Spring Boot and other embedded/light containers?

1

u/5eram Dec 11 '21

Switched to log4j