Log4j

Apache Log4j is the industry-standard, high-performance Java logging framework: essential for recording application events, but infamous for a critical vulnerability.

Log4j is the core Java logging utility from the Apache Software Foundation, used across countless enterprise applications and services (AWS, Apple, etc.). It’s a versatile, feature-rich framework: developers use it to capture application events, format them via Layouts (JSON, Syslog), and direct output through various Appenders (files, databases, consoles). However, its reputation is now defined by the critical zero-day vulnerability, Log4Shell (CVE-2021-44228), discovered in December 2021. This flaw, present in versions 2.0-beta9 through 2.14.1, exploited the JNDI Lookup feature, enabling unauthenticated Remote Code Execution (RCE) via a simple, malicious string injection.

https://logging.apache.org/log4j/2.x/