In IntelliJ IDEA prior to 2020.3.3, XXE was possible, leading to information disclosure.
jetbrains intellij idea