XXE

An XML External Entity attack abuses XML parsers that process external entity references embedded in submitted documents. Attackers can use it to read local files, probe internal networks, or cause denial of service.