U.S. Dept Of Defense · Report #188743
XXE on DoD web server
Validstatus
criticalseverity
38upvotes
9 Jan 2017disclosed
Summary
A Department of Defense webserver was vulnerable to an XML External Entity (XXE) processing vulnerability. dawgyg was able to exploit this vulnerability by crafting an XML request that revealed sensitive local system information. Thanks dawgyg!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.