Vimeo · Report #549882
SSRF leaking internal google cloud data through upload function [SSH Keys, etc..]
Validstatus
criticalseverity
276upvotes
13 Dec 2019disclosed
Summary
Using our upload feature, the user was able to force an SSRF to occur.
For more information you can read my writeup: https://medium.com/@dPhoeniixx/vimeo-upload-function-ssrf-7466d8630437
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.