XXE

What is XXE?

XML External Entity (XXE) is a type of security vulnerability that allows an attacker to interfere with an application's processing of XML data. It occurs when an XML input parser processes XML that contains a reference to an external entity, such as a system file or URL. Attackers can exploit this to read sensitive data, execute remote code, or perform denial-of-service attacks.