# Posts by tag 'local-file-inclusion' — Liran Tal

AI security researcher, open-source maintainer, and author. Explore Liran Tal’s blog, research papers, developer tools, books, and conference talks.

Canonical: https://lirantal.com/tag/local-file-inclusion

*   Apr 27, 2023 · 2 min read

    ## [Disclosing a local file inclusion vulnerability in xmlhttprequest library](/blog/local-file-inclusion-in-xmlhttprequest-library)

    I found a Local File Inclusion (LFI) security vulnerability in xmlhttprequest library but it's still unfixed.

    *   [security](/tag/security)
    *   [vulnerability](/tag/vulnerability)
    *   [advisory](/tag/advisory)
    *   [cve](/tag/cve)
    *   [xmlhttprequest](/tag/xmlhttprequest)
    *   [local-file-inclusion](/tag/local-file-inclusion)
    *   [lfi](/tag/lfi)

     [![](/_astro/photo-1516849677043-ef67c9557e16.fC1eXFFa_3H0Yw.jpg)](/blog/local-file-inclusion-in-xmlhttprequest-library)