U.S. Dept Of Defense · Report #226245
Remote code execution (RCE) in multiple DoD websites
Validstatus
criticalseverity
8upvotes
5 Jul 2017disclosed
Summary
A remote code execution (RCE) vulnerability was found on a DoD website which could have enabled an attacker to execute remote commands on the web server. Thank you @joaomatosf for notifying us of this vulnerability!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.