Inside the log4j2 vulnerability (CVE-2021-44228)
blog.cloudflare.com