Log4Shell Retrospective: What It Revealed About Software Supply Chain Fragility
December 9, 2021. The Log4Shell vulnerability is published. CVSSv3 score: 10.0—the maximum. Every organization running Apache Log4j—which turned out to be almost every organization running Java in any capacity—had a…