writeups.xyz / Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)

Submitter : c2a

Date: 17 January 2022

Bounty : undisclosed

Vulnerabilities :

• SSRF
• CSRF

Programs :

• VMware

Authors :

• Shubham Shah (@Infosec_au)
• Keiran Sampson (@Hpy_downunder)

Link :
https://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf/