writeups.xyz / Micro Services, Major Headaches: Detecting Vulnerabilities in Erxes' Microservices

Submitter : c2a

Date: 21 March 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Path Traversal
• Authentication Bypass
• Arbitrary File Overwrite
• GraphQL
• SSRF
• Security Code Review

Programs :

• Erxes

Authors :

• Paul Gerste

Link :
https://www.sonarsource.com/blog/micro-services-major-headaches-detecting-vulnerabilities-in-erxes-microservices/