ExpressionEngine · Report #1096045
Import/Convert user file exposure leading to logins/passwords/PII leak.
Validstatus
lowseverity
22upvotes
28 May 2024disclosed
Summary
User data files processed through admin tools are stored in a predictable location, making them accessible without authentication if the system is configured in an insecure way.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.