U.S. Dept Of Defense · Report #329397
Remote Code Execution (RCE) in a DoD website
Validstatus
criticalseverity
13upvotes
17 Apr 2018disclosed
Summary
An application deserialization vulnerability was found in a misconfigured Department of Defense (DoD) website by @joaomatosf via POST/GET request. Impressive work. This showcases your skills!
Thank you for supporting the DoD Vulnerability Disclosure Program!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.