【20190703】Jelly的xxe漏洞（CVE）

common-jelly

import org.apache.commons.jelly.JellyContext;
import org.apache.commons.jelly.JellyException;
public class Testjelly {
    public static void main(String[] argv) throws JellyException {
        JellyContext context = new JellyContext();
        context.runScript("111.xml", null);
    }
}