Back

crnkovic.dev

Ghost
crnkovic.dev· irregular· Published 12 months ago

A personal security research blog with detailed write-ups of vulnerabilities the author found in WSO2 enterprise software in 2025, including XXE, authentication bypass and SSRF. Posts walk through the code, explain the root causes and reference the related CVEs.

wso2ssrfxxeauthentication bypasscveapi manageridentity serverjava securityprivilege escalationbug bounty
Platform
Ghost
Frequency
Irregular
Latest issue
Oct 28, 2025
Language
English
Written for
Security researchers, pentesters and developers interested in vulnerability analysis
Tone
analytical
Tracked since
Oct 24, 2026

Website: https://crnkovic.dev/