Apache “Commons Configuration” patches Log4Shell-style bug – what you need to know

By Paul Ducklin — July 8^th 2022 at 00:59

It's a bit like Log4J, but for configuration files, not for logging.