[oozie] XML External Entity Processing vulnerability