It looks like another Spring for Java development has sprung up, even though it is Autumn in the Southern Hemisphere. It looks very much another extension to Log4J and Spring for Cloud with serious consequences.
Here is an analysis (one of many out there) that describes the similarities with Log4j. This one describes the exploit scenario associated with Spring Core and the dependencies
This is a follow up to to my original piece - it appears the number of systems affected is far greater than organisations anticipated. Some sleepless nights for many.
