The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport.

Published Feb 6, 2024 · Updated Jun 17, 2025 · Assigned by mitre