Rockstar Games · Report #210238
full path disclosure on www.rockstargames.com via apache filename brute forcing
Validstatus
lowseverity
48upvotes
4 Oct 2019disclosed
Summary
In this report, the researcher found that sending a request with an invalid Accept header to http://www.rockstargames.com/index resulted in a full path disclosure to the webroot. This was fixed as a result of the researcher's aid.
Please be aware that after this report was resolved, we added "Path Disclosures" to our list of Excluded issues. Please read the full Exclusions list for more details.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.