Chaturbate · Report #385178
Blind SSRF on image proxy camo.stream.highwebmedia.com
Validstatus
mediumseverity
10upvotes
20 Sept 2018disclosed
Summary
The hacker discovered that our secure image proxy camo.stream.highwebmedia.com could be used to access http(s) endpoints on internal ips. The application was patched to not allow access to internal ips. In this case these servers are in a separate cluster with no access to other services so possible exploitation was limited.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.