8 ms·
That's a good technical write-up. I wonder how much of an issue this CVE will be compared to Log4Shell....
by PeekPoke 4y ago
That's a good technical write-up. I wonder how much of an issue this CVE will be compared to Log4Shell....
- cws 4y agoDepends a lot on how many Spring apps out there have the prereqs to be vulnerable. The widespread nature of Log4Shell is what made it “worse” than other RCE vulns. I don’t have a sense of how many vulnerable instances of this one might be out there but the number could be enormous.