CVE-2021-44228

Apache Log4j2 Remote Code Execution Vulnerability

Description

Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.

Severity: CRITICAL

CVSS Score: 10

Vendor: Apache

Product: Log4j2