Upserve · Report #329218
reports.breadcrumb.com is vulnerable for Arbitrary file existence disclosur CVE-2014-7829
Validstatus
lowseverity
$200bounty
14upvotes
29 Mar 2018disclosed
Summary
A directory traversal vulnerability in a third-party ruby gem allowed a remote actor to determine the existence (but not the contents) of files outside of the application root.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.