An attack that abuses XML external entity references to read internal information.
Short for XML External Entity. It abuses an XML parser's external entity reference feature to read files and other data on the server. The most basic and effective defense is explicitly disabling external entity resolution, which most XML parsers enable by default.
© 2026 ITBGM