https://tsecurity.de/de/1097769/IT+Reverse+Engineering/Sicherheitsl%C3%BCcken/Apache+Karaf+up+to+4.1.6%2F4.2.1+Features+Deployer+XMLInputFactory+XML+External+Entity/