POJIA破甲
地图 / LFI from bypassing image parser and faking HEAD response with redirection

LFI from bypassing image parser and faking HEAD response with redirection

信息泄露 / File and Directory Information Exposure / #998264

厂商
BugPoC
严重程度
未评级
赏金
—
弱点
File and Directory Information Exposure
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 BugPoC 所有

同类报告

File listing through scripts folderTennessee Valley Authority · 2024-02-09Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://████U.S. Dept Of Defense · 2021-07-29Production Key and Data Found on Subdomain No Longer Operated by Shopify / Dangling DNSShopify · 2024-05-01Public and secret api key leaked via Solana BBP github repoSolana BBP · —Cookie exposure due to unexpected file permission changecurl · 2025-10-27LFI on Accounting server and RCE on FliteThermostat admin server50m-ctf · —