4 ms·
Is that not the "XML External Entity processing to Blind SSRF on Java Management API" SSRF? As that would make sense to match that payment. I really struggle to
by lukeramsden 6y ago
Is that not the "XML External Entity processing to Blind SSRF on Java Management API" SSRF? As that would make sense to match that payment. I really struggle to believe that the $6k is for the maven access one, that's a billion dollar vulnerability.
- ryanlol 6y agoThat’s not a billion dollar vulnerability, you can buy recent copies of this source code for a million dollars.
- ec109685 6y agoA million dollars for iOS's source code?
- ryanlol 6y agoYeah. This stuff gets traded all the time.
- aero-glide 6y agoWhere can I read more about this?