LY Corporation · Report #1068301
File sizes may be manipulated into negative numbers when uploading
Validstatus
mediumseverity
$500bounty
59upvotes
10 Jul 2024disclosed
Summary
When uploading a large file, a message indicating that there is not enough storage space is displayed. However, because the file size is recalculated and transmitted during upload, if the file is altered to have a negative size, the upload is allowed.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.