XXE

XML External Entity injection. An attack against applications that parse XML input, allowing attackers to read local files, perform SSRF, or execute denial of service.