N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure