CVE-2017-6344

https://notcve.org/view.php?id=CVE-2017-6344

XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document. Vulnerabilidad XEE en Grails PDF Plugin 0.6 permite a atacantes remotos leer archivos arbitrarios a través de un documento XML manipulado. • http://www.securityfocus.com/bid/96446 https://www.ambionics.io/blog/grails-pdf-plugin-xxe • CWE-611: Improper Restriction of XML External Entity Reference •