Local File Disclosure /Delete On [us-az-vpn.acronis.com]
该报告还没有中文解读。
原文摘录
摘自原文（2996 字符中的一小部分）
was found to be using an outdated version that suffers from a Local File Disclosure /Delete vulnerability. Through this vulnerability an unauthenticated remote attacker can read and delete the contents of any file stored on the VPN server without authentication; including the VPN "lua" source code …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Acronis 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @10nf · 版权归作者与 Acronis 所有