Rule to detect vulnerable use of Log4J library (CVE-2021-44228)?

[Alexandre_Gigleux]

Hello @mcoder,

I moved your question out the main Log4J thread so it’s simpler to answer you.

I’ve just posted an answer here with details of what SonarQube can do to help.

Alex