Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Zamzar API Advisory

Summary

A Bishop Fox advisory on an SSRF flaw in the Zamzar file-conversion API: malicious XML in an ODT file let attackers read remote and local objects, achieving file inclusion as root.
Published
Collected

original ↗

Related coverage

back