General Motors · Report #111999
Full Path Disclosure on gmchat.gm.com
Validstatus
3upvotes
23 May 2016disclosed
Summary
Users were able to download website application files as well as identify application path information. Permissions have since been fixed to no longer allow application information disclosure.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.