Apache Abdera
Monthly
XML external entity injection in Apache Abdera (all versions) allows unauthenticated remote attackers to read sensitive data or trigger server-side requests when an application feeds attacker-controlled XML into Abdera's parser or JDBC adapter parsing paths. The project is retired and unsupported, so Apache states it will not issue a fix, and downstream products that still bundle the Abdera artifact remain exposed. No public exploit identified at time of analysis, and exploitation is deployment-dependent: the target must still embed Abdera and route untrusted XML to it.
XML external entity injection in Apache Abdera (all versions) allows unauthenticated remote attackers to read sensitive data or trigger server-side requests when an application feeds attacker-controlled XML into Abdera's parser or JDBC adapter parsing paths. The project is retired and unsupported, so Apache states it will not issue a fix, and downstream products that still bundle the Abdera artifact remain exposed. No public exploit identified at time of analysis, and exploitation is deployment-dependent: the target must still embed Abdera and route untrusted XML to it.