AWS keys and user cookie leakage via uninitialized memory leak in outdated librsvg version in Basecamp
该报告还没有中文解读。
原文摘录
摘自原文（8285 字符中的一小部分）
Basecamp supports uploading SVG pictures as avatars. Apparently, they are converted via an outdated librsvg version at Basecamp's servers. This version contains a vulnerability that allows leakage of the contents of an uninitialized memory block (that is, something is malloced, never initialized, …
原文中的代码
while true; do curl "████$RANDOM$RANDOM$RANDOM$RANDOM.png?v=1" | python3 rsvgeb.py recover 260x260 - | strings -n 10 | tee -a pizda_hui_govno.txt; done
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Basecamp 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @neex · 版权归作者与 Basecamp 所有