Quick note for visitors interested in Log4Shell:

• The issue reported by @panda is NOT a Log4Shell-like vulnerability (which is about attacking via log message).
• So far, no Log4Shell-like vulnerability has been discovered nor reported for Logback.