2 ms·
This is one of my favourite class of vulnerabilities. Many applications and saas products that deal with images are susceptible to this vector because often im
by xnorswap 5y ago
This is one of my favourite class of vulnerabilities.
Many applications and saas products that deal with images are susceptible to this vector because often image handling isn't a core business just a means to an end, so isn't always given the priority or deference it deserves.
The SVG format by spec is a swiss army knife that contains all kinds of opportunities for leveraging poor handling of the data it can contain.