A writeup about my finding on Synack that was an XXE that allowed me to read local files stored on the web server.