XML External Entity (XXE)

nutch is vulnerable to XML external entity XXE attacks. The external DTDs is enabled by default and allows an attacker to perform server-side request forgery attacks, obtain system files and internal resources via a malicious Dmoz document...