Simon Koeck · Apr 7, 2026
Reading /etc/passwd via Translation Upload in Tolgee
0Sign in to vote or save
This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.
Tolgee's XML translation importers ship with zero security config. Upload a crafted file, read anything from the server. Confirmed on their cloud platform.
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.