PRODSECBUG-2375: Arbitrary code execution via malicious XML layouts

More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13...