Exploiting blind XXE to exfiltrate data using a malicious external DTD 1 Exploiting blind XXE to exfiltrate data using a malicious external DTD 27/11/2024