Collected research

FileCry - The New Age of XXE

FileCry

Hormazd Billimoria, Xiaoran Wang, Sergey Gorbaty and Jonathan Brossard · blackhat.com

Internet Explorer up to version 11 can be pushed back onto the vulnerable MSXML3 parser via a compatibility-mode meta tag, and its XML external entity resolution does not re-check the same-origin policy after a redirect. A malicious page can therefore read cross-origin JSON endpoints authenticated by cookies, and arbitrary local files, with no user prompt.

Record

Document

FileCry

Researcher

Hormazd Billimoria, Xiaoran Wang, Sergey Gorbaty and Jonathan Brossard

Published by

blackhat.com

Format

Recording

Topic

Injection

In the archive

• Collected in the 2015 research round

Related sources

• us 15 Wang FileCry The New Age Of XXE ie wp Whitepaper
• us 15 Wang FileCry The New Age Of XXE Whitepaper
• FileCry - The New Age Of XXE

Tags

• xxe
• sop-bypass
• same-origin-policy
• info-leak
• cve
• owasp-a01-2021
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Hormazd Billimoria, Xiaoran Wang, Sergey Gorbaty and Jonathan Brossard, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 7 August 2026.