Jackrabbit

An unauthenticated remote attacker can exploit a deserialization vulnerability in Apache Jackrabbit to achieve remote code execution.