地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Arbitrary write in the application's data folder and arbitrary read of server's replies from 3rd party apps.
Arbitrary write in the application's data folder and arbitrary read of server's replies from 3rd party apps.
路径遍历
/
路径遍历
/ #1710541
厂商
Basecamp
严重程度
中危
· CVSS 8.8
赏金
—
弱点
路径遍历
研究员
@fr4via
披露日期
2023-06-07
资产
com.basecamp.bc3
CVE
—
该报告还没有中文解读。
时间线
2022-09-23
报告提交
2023-06-07
公开披露
阅读 HackerOne 原文 ↗
作者 @fr4via · 版权归作者与 Basecamp 所有
同类报告
Arbitrary file read via the UploadsRewriter when moving and issue
GitLab · 2020-04-27 · $20,000
Arbitrary file read via the bulk imports UploadsPipeline
GitLab · 2022-03-21 · $29,000
Misuse of an authentication cookie combined with a path traversal on app.starbucks.com permitted access to restricted data
Starbucks · 2020-06-16
Arbitrary file read during project import
GitLab · 2021-05-24 · $16,000
Burp Suite Professional: browser-powered crawl can write attacker-controlled files through file input handling
PortSwigger Web Security · 2026-06-14 · $5,000
Path traversal in filename in LINE Mac client
LY Corporation · 2020-07-31