Internet Bug Bounty · Report #2107

Handling of jar: URIs bypasses AllowScriptAccess=never

Validstatus

$2,000bounty

6upvotes

14 Jan 2014disclosed

How it was found

This bug was reported directly to Adobe.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original