Hacker News new | ask | show | jobs
by vince14 1642 days ago
> Introduced arbitrary code execution via ${jndi:ldap://... inside any logged string.

hehe