Known Vulnerabilities in Apache Commons Configuration 2.1.1