Room for Escape - Scribbling Outside the Lines of Template Security
Explore a Black Hat conference talk that delves into the security vulnerabilities of Content Management Systems (CMS) and collaboration platforms. Learn about the potential risks associated with template engines, safe mode attacks, and object data sources. Discover how attackers can exploit design mode, web configurations, and unsafe decentralization in popular platforms like SharePoint. Gain insights into template API analysis, object dumpster diving, and time-of-use problems. Understand the importance of proper security measures in digital communication and collaboration tools through real-world examples and attack demonstrations. Equip yourself with knowledge to better protect your organization's content pipelines and workforce collaboration platforms.