HexBrain

Weblate · Report #257376

Missing Restriction On String Size

Validstatus
8upvotes
16 Sept 2017disclosed

How it was found

Similar to #223454, there is no string size restriction on project parameter which is sent directly to the server.

URL: https://hosted.weblate.org/hosting/ PoC: poc1.png and poc2.png

Shall you need any more info notify me,

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original