Hacker TV – What Is An XXE Attack?

XML files can incorporate inline references to other documents.

Unsafe treatment of external references allows an attacker to probe your file system for sensitive information – an XML External Entity (XXE) attack.