HexBrain

Internet Bug Bounty · Report #905015

Long filenames cause OOM and temp files are not cleaned

Validstatus
mediumseverity
$500bounty
4upvotes
10 Oct 2020disclosed

How it was found

https://bugs.php.net/bug.php?id=78875

Impact

Disk could be filled up completely by remote attacker without privileges.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original