EIP-2026-102371

This exploit demonstrates an XXE (XML External Entity) vulnerability in the Grails PDF Plugin 0.6. It uses a malicious DTD and a bounce server to exfiltrate arbitrary files from the target system by embedding them in a generated PDF.