XML External Entities (XXE)

org.apache.karaf.util is vulnerable to XML External Entities XXE attacks. The vulnerability exists due to the lack of default restriction of XML entities, allowing XXE attacks...