writeups.xyz / Abusing ACL Permissions to Overwrite other User’s Uploaded Files/Videos on s3 Bucket

Submitter : c2a

Date: 30 December 2018

Bounty : undisclosed

Vulnerabilities :

• Unrestricted File Upload
• Broken Authorization

Programs :

• Undisclosed

Authors :

• Armaan Pathan (@Armaancrockroax)

Link :
https://medium.com/@armaanpathan/abusing-acl-permissions-to-overwrite-other-users-uploaded-files-videos-on-s3-bucket-162c8877728