writeups.xyz / From Discovery to Disclosure: ReCrystallize Server Vulnerabilities

Submitter : c2a

Date: 22 March 2024

Bounty : undisclosed

Vulnerabilities :

• Default Credentials
• LFI
• Authentication Bypass
• Privilege Escalation
• Unrestricted File Upload
• RCE

Programs :

• ReCrystallize Software

Authors :

• Paul Van Der Haas (@PvdH)

Link :
https://sensepost.com/blog/2024/from-discovery-to-disclosure-recrystallize-server-vulnerabilities/