Microsoft Baseline Security Analyzer version 2.3 suffers from an XML external entity injection vulnerability. Continue reading...