Moneybird · Report #130661

XXE issue

Validstatus

13upvotes

17 Mar 2017disclosed

Summary

Researcher found an XXE issue in SVG files uploaded to our software. We gave improved our software to actively scan for these vulnerabilities and prevent any harm.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original