Sony · Report #986380
LFI at http://www.████
Validstatus
highseverity
37upvotes
16 Dec 2022disclosed
Summary
The researcher reported that a Sony endpoint was vulnerable to a Local File Inclusion (LFI) vulnerability via a URL parameter. The researcher was able to leverage this vulnerability to read the contents of sensitive system files such as /etc/passwd and /proc/version.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.