Known Vulnerabilities in Apache Commons Configuration