www-xxe

WWW XXE: Understanding and Preventing XML External Entity Attacks

XXE lets a crafted XML document read files, reach internal services, and exhaust resources. Here is how the attack works and how to shut it down.