Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (BCEL).
Advisories for Maven/Com.googlecode.aviator/Aviator package
2021