3 ms·

$6k for an internal perimiter SSRF that led to source code access? What a joke.

• lukeramsden 6y ago
  Is that not the "XML External Entity processing to Blind SSRF on Java Management API" SSRF? As that would make sense to match that payment. I really struggle to believe that the $6k is for the maven access one, that's a billion dollar vulnerability.
  • ryanlol 6y ago
    That’s not a billion dollar vulnerability, you can buy recent copies of this source code for a million dollars.
    • ec109685 6y ago
      A million dollars for iOS's source code?
      • ryanlol 6y ago
        Yeah. This stuff gets traded all the time.
        • aero-glide 6y ago
          Where can I read more about this?