writeups.xyz / Kirby < 3.9.6 XML External Entity (XXE) vulnerability — CVE-2023-38490

Submitter : c2a

Date: 6 September 2023

Bounty : undisclosed

Vulnerabilities :

• XXE
• Security Code Review

Programs :

• Kirby

Authors :

• Bastian Allgeier (@Bastianallgeier)
• Lukas Bestle (@Lukasbestle)

Link :
https://www.acceis.fr/kirby-3-9-6-xml-external-entity-xxe-vulnerability-cve-2023-38490/