Log4j Vulnerability | Mitigation | Recent Important interview question | #securitytesting

Explained the following :
What is log4j vulnerability?
How did it all started?
What did Dev security company say about this vulnerability?
CVSS score? 10
Talk about RCE and what is it compared to?
JNDI look up?
How did we mitigate?
what is the solution?
QA takeaways?????

Feature 1
logger.error("Error message: {}",error.getMessage());
Feature 2
JNDI lookups(lets you store java objects in a remote location and serialize
them)

Видео Log4j Vulnerability | Mitigation | Recent Important interview question | #securitytesting канала Supriya Baru