writeups.xyz / Data Exfiltration through Blind XXE on PDF Generator

Submitter : c2a

Date: 13 September 2022

Bounty : undisclosed

Vulnerabilities :

• Blind XXE
• WAF Bypass

Programs :

• Undisclosed

Authors :

• Arben Shala (@Arbennsh)

Link :
https://arben.sh/bugbounty/Blind-XXE-CVE-2019-12154/