U.S. Dept Of Defense · Report #184596
Unrestricted File Upload
Validstatus
criticalseverity
31upvotes
22 Dec 2016disclosed
Summary
A Navy system had a file upload tool accessible from the Internet. This would have permitted an attacker to upload malicious files and potentially execute code on the server. Thanks to @hogarth45 for reporting it.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.