The exploitation continues, as a second vulnerability has been discovered. Apparently the remediation for Log4j was incomplete according to Apache, in some configurations. The Apache Log4j2 is an upgrade to Log4j that is supposed to provide significant improvement.