---
id: 891
title: "[CVE-2021-44228] Log4Shell, The Worst Java Vulnerability in Years"
cve: CVE-2021-44228
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/log4shell-the-worst-java-vulnerability-in-years/"
published_at: "2021-12-13 00:00"
tags: ["rce", "supply-chain", "zero-day", "java", "log4j", "log4shell", "cve-2021-44228"]
phying_url: "https://phying.com/item/891"
lang: en
---

# [CVE-2021-44228] Log4Shell, The Worst Java Vulnerability in Years

## Summary

Log4Shell (CVE-2021-44228) is a 10.0-critical RCE affecting Apache Log4j 2.0-beta9 to 2.14.1, hitting Apple, Cloudflare, Twitter, and Minecraft—considered worse than the 2017 Apache Struts flaw.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **CVE:** CVE-2021-44228
- **Published:** 2021-12-13 00:00
- **Original:** https://www.bugcrowd.com/blog/log4shell-the-worst-java-vulnerability-in-years/
- **Phying News:** https://phying.com/item/891