# Posts by tag 'lfi' — Liran Tal

AI security researcher, open-source maintainer, and author. Explore Liran Tal’s blog, research papers, developer tools, books, and conference talks.

Canonical: https://lirantal.com/tag/lfi

[![](/_astro/photo-1516849677043-ef67c9557e16.fC1eXFFa_3H0Yw.jpg)

Apr 27, 2023 2 min read

### Disclosing a local file inclusion vulnerability in xmlhttprequest library

I found a Local File Inclusion (LFI) security vulnerability in xmlhttprequest library but it's still unfixed.](/blog/local-file-inclusion-in-xmlhttprequest-library)

*   [security](/tag/security)
*   [vulnerability](/tag/vulnerability)
*   [advisory](/tag/advisory)
*   [cve](/tag/cve)
*   [xmlhttprequest](/tag/xmlhttprequest)
*   [local-file-inclusion](/tag/local-file-inclusion)
*   [lfi](/tag/lfi)