Other nomination
The minefield between syntaxes: exploiting syntax confusion
Parsers in one stack accept different syntaxes for the same value: Python and Perl named unicode escapes, Content-Disposition filename versus filename*, file URIs carrying a host, and PHP parse_url ports with leading zeros. Attackers use the disagreement to bypass filters, poison a cache into stored XSS, and turn a limited SSRF into arbitrary file read.
Record
- Researcher
- Alex Brumen
- Published by
- YesWeHack
- Date
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Alex Brumen, first published at the original source. Preserved copies are kept so the citation survives its host.