writeups.xyz / Story of a 2.5k Bounty — SSRF on Zimbra Led to Dump All Credentials in Clear Text

Submitter : c2a

Date: 2 July 2020

Bounty : 2,500

Vulnerabilities :

• SSRF

Programs :

• Cafebazaar

Authors :

• Yashar Shahinzadeh (@YShahinzadeh)

Link :
https://infosecwriteups.com/story-of-a-2-5k-bounty-ssrf-on-zimbra-led-to-dump-all-credentials-in-clear-text-6fe826005ccc