ExpressionEngine · Report #341992
Import File Converter - local File inclusion
Validstatus
lowseverity
6upvotes
17 May 2018disclosed
Summary
@lawrenceamer discovered a local file inclusion vulnerability that logged in users with access to the control panel and permission to access developer utilities may be able to exploit. @lawrenceamer gave a detailed report with step-by-step instructions for replicating and screen captures of a their results, enabling a speedy resolution to the issue.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.