writeups.xyz / The OWASSRF + TabShell exploit chain

Submitter : c2a

Date: 26 December 2022

Bounty : undisclosed

Vulnerabilities :

• SSRF
• Path Traversal
• Sandbox Escape

Programs :

• Microsoft

Authors :

• Rskvp93 (@Rskvp93)
• Q5Ca (@_Q5ca)
• Nxhoang99 (@Nxhoang99)

Link :
https://blog.viettelcybersecurity.com/tabshell-owassrf/