Docparse

The work of researchers involves looking for legitimate features and capabilities in technologies that can be abused to an attacker's advantage. In the case of XML entities, they often allow for the exploitation of SSRF or arbitrary file reading vulnerabilities.

After gaining access, you spend time reviewing what the current user is allowed to do as other users. One seemingly harmless text-editing utility has far more power than it first appears. Consider how trusted administrative tools can sometimes provide unexpected paths to higher privileges.