Hello,
I would like to start the implementation for a plugin that detects Apache Log4j2 RCE vulnerability,
The vulnerability should be relatively new and it is a serious problem.
Apache log4j2 is affected from 2.0 to 2.14.1.
The vulnerability has been fixed, but there is no CVE number yet.

• Restrict LDAP access via JNDI apache/logging-log4j2#608
• https://github.com/apache/logging-log4j2/releases/tag/log4j-2.15.0-rc1
• https://issues.apache.org/jira/projects/LOG4J2/issues/LOG4J2-3201?filter=allissues

Please let me know if this is in scope to start with its development.