XXE SVG Passwd

Returns an SVG payload with XXE to get files

/sp

attempts to get /etc/passwd