xxe Remote compromise: XXE injection on thin client’s web services During one of our perimeter assessment exercises, we identified and exploited a vulnerability in an in-house developed thin client