Stripo Inc · Report #753375
Upload Profile Photo in any folder you want with any extension you want
Validstatus
criticalseverity
33upvotes
30 Mar 2022disclosed
Summary
The vulnerability has been fixed
Using this vulnerability, a Stripo user becomes able to upload his/her profile photo in any folder (including that of other users), with any file extension as per his/her wish.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.