Technology

Log4j

Apache Log4j is the industry-standard, high-performance Java logging framework: essential for recording application events, but infamous for a critical vulnerability.

Log4j is the core Java logging utility from the Apache Software Foundation, used across countless enterprise applications and services (AWS, Apple, etc.). It’s a versatile, feature-rich framework: developers use it to capture application events, format them via Layouts (JSON, Syslog), and direct output through various Appenders (files, databases, consoles). However, its reputation is now defined by the critical zero-day vulnerability, Log4Shell (CVE-2021-44228), discovered in December 2021. This flaw, present in versions 2.0-beta9 through 2.14.1, exploited the JNDI Lookup feature, enabling unauthenticated Remote Code Execution (RCE) via a simple, malicious string injection.

https://logging.apache.org/log4j/2.x/

What builders pair with Log4j

Projects using both technologies. Select a pairing to see a project.

7 more pairings

Pairing: BERT

Security & Compliance w/AI

Seattle · July 26, 2023

Recent Talks & Demos

Showing 1-1 of 1

Members-Only

Sign in to see who built these projects