Blind XXE Vulnerability

A blind XXE vulnerability means that the application does process external XML entities in an unsecure way, but does not return those entities in its responses. This means attackers will need to use advanced techniques to detect the vulnerability and exploit it.

Attackers can still exfiltrate data using blind XXE, for example by causing the server to connect to a URL controlled by the attacker.