writeups.xyz / Oracle Retail Xstore Suite: Pre-authenticated Path Traversal

Submitter : c2a

Date: 29 July 2024

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• Security Code Review

Programs :

• Oracle

Authors :

• Louis Wolfers (@TG91aXMK)
• Quentin Roland (@Croco_byte)

Link :
https://www.synacktiv.com/advisories/oracle-retail-xstore-suite-pre-authenticated-path-traversal