Azkaban up to and including 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java.
azkaban project azkaban