Are your Spring Boot Applications Vulnerable to the Log4J2 Exploit?

In this video, we will take a look at the Log4J2 Vulnerability and more specifically how it affects your Spring Boot Applications. By this time you have probably heard about the Log4J2 Exploit in the Java ecosystem but do you know if it will affect your Spring Boot applications? After this video you should have a better understanding of how logging works in a Spring Boot app and if your vulnerable to the Log4J2 exploit I will show you how you can fix it.
🔗Resources & Links mentioned in this video:
LunaSec: www.lunasec.io/docs/blog/log4...
👋🏻Connect with me:
Website: www.danvega.dev
Twitter: / therealdanvega
Github: github.com/danvega
Instagram: / thedanvega
LinkedIn: / danvega
Coffee & Code: www.danvega/dev/newsletter
SUBSCRIBE TO MY CHANNEL: bit.ly/2re4GH0 ❤️

[@epoxyde]

I'm glad I saw this video. This is very well explained. Thank you !

[@DanVega]

Thank you so much for the kind words.

[@fready_star]

Bien explicado, muchas gracias !!!

[@deepsleepmusic9364]

Your videos are easy and understandable. Please add more videos.

[@DanVega]

What would you like to see videos on?

[@Anbu_Sampath]

Nice one.

[@mkgrs8]

Great video! I don't understand one thing, at 13:44 we are importing log4j. Does spring boot still use logback in this instance or is it using Log4j? If it's using Log4j, how does it work without the core library. I assume the log4j api library is not enough? Thanks!

[@hareepjoshi]

logback < 1.2.8 is also vulnerable

[@michelchaghoury870]

pleasee we need more vids u are helping us a lot, can you please make vids about how to dockerize a springboot app with MySQL

[@DanVega]

I'm so happy to hear you find my videos useful. I'm putting that suggestion on my idea board!