corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08764-ec06-7312-b155-2b7fa5de9398

WSO2 #3: Server-side request forgery

crnkovic.dev · published 28 October 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at crnkovic.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
16
Words captured
1,615

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
WSO2 #1: 404 to arbitrary file read Read at the source ↗
crnkovic.dev
WSO2 #2: The many ways to bypass authentication in WSO2 products Read at the source ↗
crnkovic.dev
https://x.com/nol_tech
x.com
https://blog.lexfo.fr/wso2.html
blog.lexfo.fr
https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
owasp.org
https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2020/WSO2-2020-0747/
security.docs.wso2.com
https://github.com/wso2/carbon-kernel/pull/2690/files
github.com
https://github.com/wso2/carbon-kernel/blob/release-4.10.9/core/org.wso2.carbon.ui/src/main/java/org/wso2/carbon/ui/CarbonSecuredHttpContext.java
github.com
https://www.w3.org/DesignIssues/MatrixURIs.html
w3.org
https://en.wikipedia.org/wiki/Java_applet
en.wikipedia.org
https://github.com/wso2/carbon-kernel/blob/ddf7da2559d5cc709ed14965f04dd0e00ca51c0d/core/org.wso2.carbon.ui/src/main/resources/web/admin/jsp/WSRequestXSSproxy_ajaxprocessor.jsp
github.com
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Range
developer.mozilla.org
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Status/416
developer.mozilla.org
https://en.wikipedia.org/wiki/HTTP_pipelining
en.wikipedia.org
https://lokvica.com/discoveries/CVE-2025-10611/
lokvica.com
https://github.com/wso2/carbon-kernel/pull/4381/files
github.com