alestorm980

Results 3 comments of alestorm980

The functionality add attachment to parts allows access to local files.

Yes, it is possible to read files within the server to which the user running the application has access, this includes source code, system configuration files, ssh keys, etc. For...

The functionality add attachment to parts allows access to local files.

I attach the link to the advisory https://fluidattacks.com/advisories/hendrix/

The functionality add attachment to parts allows access to local ports (SSRF).

I attach the link to the advisory https://fluidattacks.com/advisories/joplin/