How We Audited a High-Traffic C++ Enterprise Stack on OVH and Mitigated XML External Entity (XXE) injection in old SOAP integrations
Initial Assessment: Identifying the Attack Surface Our engagement began with a deep dive into a high-traffic C++ enterprise stack hosted on OVH. The primary concern was a potential XML External Entity (XXE) injection vulnerability, specifically within legacy SOAP integrations. These integrations, often developed years prior and maintained by different teams, represented a significant attack surface. […]