HexBrain

Stellar.org · Report #263780

Direct URL access to PDF files

Informativestatus
mediumseverity
10upvotes
23 Feb 2020disclosed

How it was found

hi,

I was able to access the following PDF files without any authentication

https://www.stellar.org/wp-content/uploads/2014/07/Bylaws-00580045-10.pdf https://www.stellar.org/wp-content/uploads/2014/07/FILED-STELLAR-DEVELOPMENT-FOUNDATION-00594674.pdf

the pdf files under path https://www.stellar.org/wp-content/uploads/2014/07/ are directly accessible

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original