XML External Entity (XXE)

Odata4j is vulnerable to XML External Entity because the library does not disable reading external entities in StaxXMLInputFactory2. A remote attacker could submit a request containing an external XML entity that, when resolved, allows that attacker to read files on the application server with us...