Improper Restriction of XML External Entity Reference
Azkaban suffers from XXE injection due to invalid handling of XML in validator/XmlValidatorManager.java and user/XmlUserManager.java.
Advisories for Maven/Com.github.azkaban.azkaban/Azkaban-Web-Server package
2020