writeups.xyz / Discourse SNS webhook RCE

Submitter : c2a

Date: 23 October 2021

Bounty : undisclosed

Vulnerabilities :

• RCE
• Signature Validation Bypass

Programs :

• Discourse

Authors :

• Joernchen (@Joernchen)

Link :
https://0day.click/recipe/discourse-sns-rce/