Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.
The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.