An XML External Entity attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser.