Eternal · Report #271224
SSRF in https://www.zomato.com████ allows reading local files and website source code
Validstatus
criticalseverity
32upvotes
28 Feb 2018disclosed
Summary
@nbsp found a SSRF vulnerability which leads to read local files from the web server (source code & system files). We have resolved the issue quickly and rewarded the researcher.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.