writeups.xyz / Authenticated Arbitrary File Download (Path Traversal)

Submitter : c2a

Date: 14 August 2023

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• Security Code Review

Programs :

• PaperCut

Authors :

• Chris McCurley (@Chrisrmccurley)

Link :
https://research.aurainfosec.io/disclosure/papercut/