HexBrain

Tor · Report #273377

Multiple Path Transversal Vulnerabilites

N/Astatus
mediumseverity
11upvotes
28 Nov 2023disclosed

How it was found

I have found multiple path transversal in *.torproject.org POC: [+] https://www.torproject.org/about/findoc/ [+] https://people.torproject.org/~infinity0/ [+] https://deb.torproject.org/torproject.org/ There are many many others which can be accessed by searching following in google: inurl:"index of" site:torproject.org I know that its out of scope of your bounty program but I thought I should tell you about it. Regards!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original