地图 / Arbitrary local system file read on open-xchange server

Arbitrary local system file read on open-xchange server

注入与走私 / 资源注入 / #303744

厂商: Open-Xchange
严重程度: 未评级
赏金: $2,000
弱点: 资源注入
研究员: —
披露日期: —
资产: —
CVE: —

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者见原文 · 版权归作者与 Open-Xchange 所有

同类报告

Nextcloud Desktop Client RCE via malicious URI schemesNextcloud · 2021-04-15 · $1,000 [Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotelyNintendo · 2025-05-15 HTML injection possible with soft email confirmations when Administrator manually confirms attacker email addressGitLab · 2024-10-08 · $1,060 Content injection in Jira issue title enabling sending arbitrary POST request as victimGitLab · 2022-09-22 Arbitrary POST request as victim user from HTML injection in Jupyter notebooksGitLab · 2022-05-20 Render content from untrusted sources via web_preview endpoint on Acronis CloudAcronis · — · $200