Lucene search
ZurkeH1:713HistoryJan 14, 2014 - 5:04 p.m.
HackerOne: Upload profile photo from URL
2014-01-1417:04:41
zurke
hackerone.com
324
0.003 Low
EPSS
Percentile
70.4%
Using this vulnerability users can upload images from any image URL.
Just change upload type using inspect element (from “type=file” to “type=url”) , paste URL in text field and hit enter or click on “Update Profile”. Your profile photo will be changed to photo from URL.
P.S Im sorry for my bad english.
Related
cvelist
cvelist
CVE-2017-0889
2017-04-21 00:00:00
redhatcve
redhatcve
CVE-2017-0889
2017-11-15 15:49:52
veracode
veracode
Server-Side Request Forgery (SSRF)
2017-11-14 07:35:08
prion
prion
Server side request forgery (ssrf)
2017-11-13 17:29:00
nvd
nvd
CVE-2017-0889
2017-11-13 17:29:00
cve
cve
CVE-2017-0889
2017-11-13 17:29:00
osv
osv
paperclip Server-Side Request Forgery vulnerability
2018-01-22 13:31:34
CVE-2017-0889
2017-11-13 17:29:00
github
github
paperclip Server-Side Request Forgery vulnerability
2018-01-22 13:31:34