CloverDX Server prior to 5.11.2 and and 5.12.x prior to 5.12.1 allows XXE during configuration import.
cloverdx cloverdx
cloverdx cloverdx 5.12.0
cloverdx cloverdx 5.12.1