[MEDIUM] Local file disclosure via XXE injection in Zend_XmlRpc

PKSA-4dxf-7w4v-7w6m GHSA-4vf6-mq7w-3hp6

Affected package: zendframework/zendframework1

Affected version: >=1.0.0,<1.11.13

Reported by:
GitHub, FriendsOfPHP/security-advisories