Product
The retired Apache Abdera library is vulnerable to XML external entity (XXE) injection, enabling unauthenticated remote attackers to access sensitive files or perform server-side requests via malicious XML input.