'Less obvious' uses of Log4j pose a major risk

Source description — as published

The Log4Shell vulnerability will be difficult to detect and fix in many cases, as Apache Log4j is used unknowingly in many software products.