165 - Apache Batik, Static Site Generators, and an Android App Vuln [Bug Bounty Podcast]

Several slightly weird issues this week, a reentrancy attack abusing a read-only function, SSRF and XSS through a statically generated website and others.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/165.html

[00:00:00] Introduction
[00:01:10] Vulnerabilities in Apache Batik Default Security Controls - SSRF and RCE Through Remote Class Loading
[00:05:48] Exploiting Static Site Generators: When Static Is Not Actually Static
[00:12:51] Decoding $220K Read-only Reentrancy Exploit
[00:23:56] Weird Vulnerabilities Happening on Load Balancers, Shallow Copies and Caches …

android android app apache app bounty bug bug bounty podcast vuln