POJIA破甲
地图 / Keybase client (Windows 10): Write files anywhere in userland using relative path in "download attachement" feature

Keybase client (Windows 10): Write files anywhere in userland using relative path in "download attachement" feature

代码执行 / 远程文件包含 / #713006

厂商
Keybase
严重程度
未评级
赏金
$5,000
弱点
远程文件包含
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Keybase 所有

同类报告

[CVE-2022-44268] Arbitrary Remote Leak via ImageMagickHackerOne · 2023-03-16SSRF & LFR via on city-mobil.ruMail.ru · —Payload delivery via Social Media urls on H1 profileHackerOne · 2024-07-23Grafana LFI on https://grafana.mariadb.orgMariaDB · 2022-01-06LFI with potential to RCE on ██████ using CVE-2019-3396U.S. Dept Of Defense · 2019-10-04ssh: unprivileged users may hijack due to backdated ssh version open port found(███.unikrn.com)Unikrn · 2019-03-04 · $25