XXE injection

• Exploiting XXE using external entities to retrieve files

• Exploiting XXE to perform SSRF attacks