Initially, details were published on seclists.org.
This one looks like Log4Shell.
However, It does not yet have a logo nor a name, so it’s must not be that bad.
Lazytom on Twitter has some additional initial information.
Essentially, the StringSubstitutor works with ${} notation for numerous interpolations.
This vulnerability, tracked as CVE-2022-42889, can lead to remote code execution.
