Tag: XXE injection

Uploaded svg images could hijack microsoft bing servers with system rights

Attackers could achieve SYSTEM-level code execution on Bing servers by uploading crafted SVG files through two chained vulnerabilities.