YouPorn: SSRF and local file disclosure by video upload on http://www.youporn.com/

2019-05-08T18:36:42
ID H1:574134
Type hackerone
Reporter tony_tsep
Modified 2019-06-24T06:16:07

Description

The researcher was successful in exploiting a vulnerability in 3rd encoding party library resulting in the execution of SSRF attacks and Local File Disclosure.