A newly disclosed Apache Log4j2 issue could allow attackers to bypass a deserialization allowlist and execute code remotely ...