POJIA破甲
地图 / Path traversal allows tricking the Talk Android app into writing files into it's root directory

Path traversal allows tricking the Talk Android app into writing files into it's root directory

路径遍历 / 路径遍历 / #1997029

厂商
Nextcloud
严重程度
低危 · CVSS 4.4
赏金
—
弱点
路径遍历
研究员
@fr4via
披露日期
2023-08-14
资产
com.nextcloud.talk2
CVE
CVE-2023-39957

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @fr4via · 版权归作者与 Nextcloud 所有

同类报告

Arbitrary file read via the UploadsRewriter when moving and issueGitLab · 2020-04-27 · $20,000Arbitrary file read via the bulk imports UploadsPipelineGitLab · 2022-03-21 · $29,000Misuse of an authentication cookie combined with a path traversal on app.starbucks.com permitted access to restricted dataStarbucks · 2020-06-16Arbitrary file read during project importGitLab · 2021-05-24 · $16,000Burp Suite Professional: browser-powered crawl can write attacker-controlled files through file input handlingPortSwigger Web Security · 2026-06-14 · $5,000Path traversal in filename in LINE Mac clientLY Corporation · 2020-07-31