XSS to CSRF to RCE in a big commercial software

November 1, 2023

Or how using a software at work, we uncovered a way to take over the server that was hosting it.