---
id: 4120
title: "Zamzar API Advisory"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/zamzar-api-advisory"
published_at: "2020-08-27T00:00:00Z"
tags: ["api-security", "vulnerability", "advisory", "ssrf", "lfi", "file-conversion"]
phying_url: "https://phying.com/item/4120"
lang: en
---

# Zamzar API Advisory

## Summary

A Bishop Fox advisory on an SSRF flaw in the Zamzar file-conversion API: malicious XML in an ODT file let attackers read remote and local objects, achieving file inclusion as root.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2020-08-27T00:00:00Z
- **Original:** https://bishopfox.com/blog/zamzar-api-advisory
- **Phying News:** https://phying.com/item/4120