Demo consumer for CVE-2016-0714 (Tomcat session persistence RCE) + CVE-2013-1814 (Apache Rave UserApi info disclosure) plus four filter-padding Java OSS vulns. context.xml enables PersistentManager → Tomcat chain HOT; applicationContext-security.xml gates /api/rpc/users/** to ROLE_ADMIN → Rave chain BROKEN. Used by EXPOSURE's configexposurescanner as the Set #2 multi-finding demo target.
CVE-2016-0714（Tomcat 会话持久化远程代码执行）和 CVE-2013-1814（Apache Rave UserApi 信息泄露）以及四个过滤器填充型 Java 开源软件漏洞的演示消费程序。context.xml 启用了 PersistentManager → Tomcat 链处于活跃状态；applicationContext-security.xml 将 /api/rpc/users/** 限制为 ROLE_ADMIN 角色 → Rave 链处于失效状态。被 EXPOSURE 的 configexposurescanner 用作第二组多发现项演示目标。
