After hearing nothing back for more than three months, the researcher contacted ZDNet, which also alerted the company to the vulnerability. The bug exploited an out-of-band XML external entities (OOB-XEE) flaw that abused how Nike's website parses XML-based files, allowing the researcher to read ...
from Google Alert - vulnerability http://ift.tt/2D3Lyyy
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment