HexBrain

Ruby · Report #207053

Writable RubyCi Amazon s3 bucket

Validstatus
highseverity
14upvotes
27 Feb 2017disclosed

How it was found

Hello, I have discovered that the bucket: http://rubyci.s3.amazonaws.com/ is able to be written to by authenticated aws users. This is due to the current permissions configurations I have added a file here: http://rubyci.s3.amazonaws.com/test.html for proof of concept. This can be potentially dangerous to your users and website, as any of the web content in this bucket may be replaced with malicious files. More info about these permissions can be found here: http://docs.aws.amazon.com/AmazonS3/latest/dev/s3-access-control.html

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original