Alibaba Cloud researcher Chen Zhaojun discovered the flaw in the Log4j open-source software and in November emailed it to members of the Apache Software Foundation community, which helps maintain ...
“I want to report a security bug,” wrote Chen Zhaojun, an employee on Alibaba Group Holding Ltd’s cloud-security team, adding “the vulnerability has a major impact”.