8x8 · Report #778629

(Critical) Remote Code Execution Through Old TinyMCE upload bypass

Validstatus

highseverity

13upvotes

12 Feb 2020disclosed

Summary

A third party marketing site utilized an outdated version of TinyMCE that was vulnerable to CVE-2011-4906.

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original