Exploiting blind XXE to exfiltrate data using a malicious external DTD 1 Exploiting blind XXE to exfiltrate data using a malicious external DTD Nov 27, 2024