Log4J Vulnerability (Log4Shell) Explained - for Java developers

Technology Booster is an online platform where we provide content post thorough analysis. We cover technical topics in which normal people feel like novices in the phase of transition from the old era to the digital world.
In case you want to get a detailed analysis of any topic in which you are stuck then please mention it in the comment section, We will try to deliver content in the desired format so that everyone can understand it.
We basically try to cover every video in Hindi though anyone can understand better in their native language.
Recently We launched MY SHOP APP on Google Play Store, you can visit through below link
https://play.google.com/store/apps/details?id=com.vijay.myshop

Learn exactly what the Log4J vulnerability is, including Java code and the attach details. I also share some thoughts on open source in general.

What is log4j vulnerability?

logger.error("hello log4j"+request.getParameter("inputFromFrontEndEnd"));

localhost:8080//abc//inputFromFrontEndEnd="xyz"


localhost:8080//abc//inputFromFrontEndEnd="xyz"


localhost:8080//abc//inputFromFrontEndEnd="ecodeddata%*dkuoasudi"


How to mitigate log4j vulnerability...

1.You can use log4j version greater than 2.15 .(working fine)
2.You can disable vlookupClass by passing argument in configuration.
zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class



Thanks for watching this video.
Please like videos, subscribe and share our channel. Have a nice day...