Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java.

Published Mar 26, 2020 · Updated Aug 4, 2024 · Assigned by mitre