The Design and Implementation of laffer1

Opengrok 1.6.7 and lower are vulnerable to a nasty RCE. 

https://medium.com/@bobbyrsec/oracle-opengrok-rce-cve-2021-2322-a284e5621bfe