The middleware component in OX App Suite up to and including 7.10.5 allows Code Injection via Java classes in a YAML format.
open-xchange ox app suite