writeups.xyz / ESI Injection Part 2: Abusing specific implementations

Submitter : c2a

Date: 2 May 2019

Bounty : undisclosed

Vulnerabilities :

• ESI Injection
• RCE
• SSRF
• HTTP Header Injection

Programs :

• Undisclosed

Authors :

• Philippe Arteau (@H3xstream)
• Benoit Côté-Jodoin (@Becojo)

Link :
https://www.gosecure.net/blog/2019/05/02/esi-injection-part-2-abusing-specific-implementations/