runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runscape services call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.Referenceshttps://github.com/runelite/runelite/issues/6160https://0dd.zone/2018/10/28/runelite-XXE-MitM/