Improper Restriction of XML External Entity Reference
A user can inject external XML entities in Apache Karaf.
Advisories for Maven/Org.apache.karaf.specs/Org.apache.karaf.specs.java.xml package
2019
A user can inject external XML entities in Apache Karaf.