XML External Entity (XXE)

jamesagnew/hapi-fhir is vulnerable to XML External Entity XXE attacks. This attack occurs because the function FhirInstanceValidator accepts and processes XML input containing a reference to an external entity, allowing a remote attacker to access local or remote files and service conditions...