Java XXE: Read secret files when parsing XML files

Today we are going to search for some vulnerabilities in the code responsible for XML parsing.

This attack is called XML ​​eXternal Entity.

The XML standard is quite complicated.
One of the additional functionalities is the ability to create entities.
They are similar to macros, for example from C language.

#from0topentestinghero #security #java