Apache XML RPC setEnabledForExtensions(true)

[h3xstream]

Apache XML RPC has extension types that are not enable by default.
https://ws.apache.org/xmlrpc/types.html

XmlRpcClientConfigImpl config = new XmlRpcClientConfigImpl();
config.setServerURL(new URL("http://127.0.0.1:18080/test"));
config.setEnabledForExtensions(true);

One of those <ex:serializable>base64serialized</...> <serializable></...> will make the

Detection inline should be enough.

Ref to include in the description :

• https://0ang3el.blogspot.com/2016/07/beware-of-ws-xmlrpc-library-in-your.html
• https://nvd.nist.gov/vuln/detail/CVE-2016-5003

[h3xstream]

Implemented by @shirinnikita. See PR ref above.