U.S. Dept Of Defense · Report #1436223

Arbitrary File Read at ███ via filename parameter

Validstatus

criticalseverity

16upvotes

14 Feb 2022disclosed

Summary

Arbitrary file reads with multiple endpoint on a DoD public facing asset.

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original