writeups.xyz / Exploiting an Order of Operations Bug to Achieve RCE in Oracle Opera

Submitter : c2a

Date: 30 April 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Unrestricted File Upload
• Path Traversal
• Security Code Review

Programs :

• Oracle (Opera)

Authors :

• Shubham Shah (@Infosec_au)
• Sean Yeoh (@Seanyeoh)
• Brendan Scarvell (@Bscarvell)
• Jason Haddix (@Jhaddix)

Link :
https://blog.assetnote.io/2023/04/30/rce-oracle-opera/