Bump log4j-core from 2.8.2 to 2.17.1 in /web (#154)

Bumps log4j-core from 2.8.2 to 2.17.1.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

web/pom.xml

@@ -157,7 +157,7 @@
 		<dependency>
 			<groupId>org.apache.logging.log4j</groupId>
 			<artifactId>log4j-core</artifactId>
-			<version>2.8.2</version>
+			<version>2.17.1</version>
 		</dependency>
 		<!-- Unit Test -->
 		<dependency>