ProxyLogon (CVE-2021-26855): Dissecting the Exchange SSRF Chain

Notes on the four-vulnerability chain that let an unauthenticated attacker take over on-premises Exchange servers in early 2021.

2021-03-10 · 3 min · 524 words · lcz