ExpressionEngine · Report #1096043

Non-authenticated path traversal leading to arbitrary file read

Validstatus

highseverity

34upvotes

28 May 2024disclosed

Summary

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure.

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original