The AMF framework in Granite Data Services 3.1.1-SNAPSHOT allows remote authenticated users to read arbitrary files send TCP requests to intranet servers or cause a denial of service via an XML external entity declaration in conjunction with an entity reference related to an XML External Entity (XXE) issue.