PHP XXE Vulnerability Leaves Sensitive Data Open to Attack

A newly discovered PHP vulnerability allows attackers to access sensitive configuration files and private keys. The flaw affects numerous applications and poses serious security risks.