HexBrain

HackerOne · Report #127827

DOS Report FILE html inside <code> in markdown

Validstatus
6upvotes
21 May 2016disclosed

Summary

"Why is it a security bug ?" I answer , if I get an invite to report to someone , I may make it NOT available report to all

And I found the error 524 on the website (all page) works on all users

{F82765}

"The rule is, jam tomorrow and jam yesterday - but never jam today." - Lewis Carroll

How it was found

LOOK rezult https://hackerone.com/reports/127809

{F82764}

POC

Copy in {F82766} TXT file (all) and create a new review I warn you , if you do this , then the report cannot open .

You can create a report , attach files and replace my files F82764 and F82765 , paste in the contents of the report and create it

Why is it a security bug ? I answer , if I get an invite to report to someone , I may make it available to all

P.S EXAMPLE html inside <code> in markdown

{F82766}

Thanks PISARENKO

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original