A malicious code string that eventually gets logged by Log4j version 2.0 or higher allow an attacker to load arbitrary Java code on a server and take control of it.

submitted by /u/yogthos to r/programming
[link] [comments]