How We Audited a High-Traffic C Enterprise Stack on DigitalOcean and Mitigated XML External Entity (XXE) injection in old SOAP integrations
Initial Stack Assessment and Audit Scope Our engagement began with a comprehensive audit of a high-traffic enterprise stack hosted on DigitalOcean. The primary objective was to identify and mitigate security vulnerabilities, with a specific focus on XML External Entity (XXE) injection, a prevalent threat in legacy SOAP integrations. The stack comprised several microservices, a central […]