File conversion tool Zamzar springs to action to quickly resolve web security flaws in API

guest · Aug 29, 2020

File conversion tool Zamzar springs to action to quickly resolve web security flaws in API
August 28, 2020
https://portswigger.net/daily-swig/...-to-quickly-resolve-web-security-flaws-in-api

A web security vulnerability that posed a severe threat to the internal systems of online file conversion utility firm Zamzar has been resolved.

Bishop Fox discovered that a server-side request forgery (SSRF) vulnerability came into play when the technology was used to convert an Open Office ODT file to a PDF.

“This vulnerability executed malicious XML content embedded in the ODT file and allowed the contents of remote and local objects to be inserted into the PDF during the conversion process,” a technical write-up of the security flaws by Bishop Fox that was published on Thursday explains.
The Daily Swig has reached out to both Bishop Fox and Zamzar for comment. We’ll update this story as more information comes to hand.
Click to expand...

Bishop Fox: Zamzar API

A server-side request forgery (SSRF) vulnerability was found in the Zamzar API when converting an Open Office ODT file to a PDF. This vulnerability executed malicious XML content embedded in the ODT file and allowed the contents of remote and local objects to be inserted into the PDF during the conversion process.
Click to expand...

Log in or Sign up

File conversion tool Zamzar springs to action to quickly resolve web security flaws in API

guest Guest

Log in or Sign up

File conversion tool Zamzar springs to action to quickly resolve web security flaws in API

guest Guest

Useful Searches