writeups.xyz / A Tale of Exploitation in Spreadsheet File Conversions

Submitter : c2a

Date: 18 October 2019

Bounty : undisclosed

Vulnerabilities :

• Local File Disclosure (LFD)
• SSRF

Programs :

• Slack

Authors :

• Brett Buerhaus (@Bbuerhaus)
• Cody Brocious (@Daeken)
• Sam Erb (@Erbbysam)
• Olivier Beg (@Smiegles)

Link :
https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions/