writeups.xyz / Orbeon Forms: The Final Form? On A Journey To RCE

Submitter : c2a

Date: 8 September 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• XSLT
• XXE
• XPATH

Programs :

• Orbeon

Authors :

• WatchTowr (@Watchtowrcyber)

Link :
https://labs.watchtowr.com/orbeon-forms-the-final-form/