This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 (through spring-boot-starter-log4j2 2.6.1) and the JDK 1.8.0_181.

This repository is the demo representation of how to add Spring Security to a fresh Spring Boot application. Adding Spring Security to Spring Boot has a surprising and interesting effect ...