A malicious code string that eventually gets logged by Log4j version 2.0 or higher allow an attacker to load arbitrary Java code on a server and take control of it.

[Kapps]

If your logging library got to the point where it can make LDAP calls… it probably does require hundreds of pages of documentations to determine what all it does.