https://blog.msnieman.com/tags/xxe/Recent content in XXE on Myles Nieman — BlogHugoen-usThu, 02 Jul 2026 00:00:00 +0000https://blog.msnieman.com/writeups/redpanda/Thu, 02 Jul 2026 00:00:00 +0000https://blog.msnieman.com/writeups/redpanda/A Spring Boot search page reflects user input into a Server-Side Template Injection sink, giving RCE as woodenk; a root-owned log-parser cron is then exploited via JPEG Artist metadata and XML External Entity injection to read root’s SSH key.