HexBrain

Mars · Report #2357778

Unrestricted File Upload at ██████████

Validstatus
criticalseverity
78upvotes
19 Feb 2024disclosed

Summary

The endpoint "████████" enables unrestricted file uploads, meaning anyone on the internet, without registration, can upload any type of file. This poses a security risk as unauthorized users could upload potentially harmful or malicious files without restriction.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original