writeups.xyz / Beyond XSS: Edge Side Include Injection

Submitter : c2a

Date: 3 April 2018

Bounty : undisclosed

Vulnerabilities :

• ESI Injection
• SSRF
• XSS

Programs :

• Squid
• Varnish

Authors :

• Louis Dion-Marcil (@Ldionmarcil)

Link :
https://www.gosecure.net/blog/2018/04/03/beyond-xss-edge-side-include-injection/