anime graf mays 🛰️🪐 (npub108z…dkr5) Alex Gleason (npub108p…yev6) yeah, XXE. Means anything that can submit an XML document that the server parses can read arbitrary files on the server, same as the other issue. Actually worse if this doesn’t require Auth. XXE is fixed by not using a shit and brain-damaged parsers, which nobody should be using. This is straight outta 2004.
Abandon hope, all ye who enter. Pleroma is fucked and was made by retards.
Matt Hamilton [Maryland] /
npub1sa…p27a4
2023-08-05 14:49:54
in reply to nevent1q…6mt3
Author Public Key
npub1sat3yl2hv2df5xmuqj75gvzfmvyxs5x36vaur9jwvjzejtx7y2hskp27a4Published at
2023-08-05 14:49:54Event JSON
{
"id": "e14e18d5b0ff983a6cbaa03fef1b7eebe44d1d6331a7d6f4fb05fad5ed9d5f48",
"pubkey": "8757127d57629a9a1b7c04bd443049db086850d1d33bc1964e6485992cde22af",
"created_at": 1691246994,
"kind": 1,
"tags": [
[
"p",
"79c4b3e2b1e7d8d74fa652cdc1dee37f9cd08fefdc13a79f8d1146c0b69fd1fb",
"wss://relay.mostr.pub"
],
[
"p",
"79c2cae114ea28a981e7559b4fe7854a473521a8d22a66bbab9fa248eb820ff6",
"wss://relay.mostr.pub"
],
[
"e",
"55490d041ef76b068012daee570d7aebd768e9528a3386831fd29467950bae50",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://noagendasocial.com/users/eriner/statuses/110837563038182095",
"activitypub"
]
],
"content": "nostr:npub108zt8c43ulvdwnax2txurhhr07wdprl0msf608udz9rvpd5l68ascvdkr5 nostr:npub108pv4cg5ag52nq082kd5leu9ffrn2gdg6g4xdwatn73y36uzplmq9uyev6 yeah, XXE. Means anything that can submit an XML document that the server parses can read arbitrary files on the server, same as the other issue. Actually worse if this doesn’t require Auth. XXE is fixed by not using a shit and brain-damaged parsers, which nobody should be using. This is straight outta 2004.\n\nAbandon hope, all ye who enter. Pleroma is fucked and was made by retards.",
"sig": "ef35140ae7da569f10acc4c99c4c8bc3de68609cd3a9df96a6aaa91bd292ea59f2056663ad43c3f5a1a8b4599a5297370f91e539c1810398395aad6f7eff6c81"
}