writeups.xyz / Exploiting Static Site Generators: When Static Is Not Actually Static

Submitter : c2a

Date: 28 October 2022

Bounty : undisclosed

Vulnerabilities :

• SSRF
• XSS
• Security Code Review

Programs :

• Netlify
• Gatsby

Authors :

• Shubham Shah (@Infosec_au)
• Sam Curry (@Samwcyo)

Link :
https://blog.assetnote.io/2022/10/28/exploiting-static-site-generators/