Udemy · Report #172694
Critical : Malware and XSS file can be uploaded and executed on udemy
Informativestatus
3upvotes
10 Jan 2017disclosed
Summary
The investigator found that he can upload any file type to our upload bucket. That is intended behavior - file content is enforced before moving it out of our upload bucket.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.