writeups.xyz / Remote Code Execution in .tgz File Upload

Submitter : c2a

Date: 30 January 2022

Bounty : 3,100

Vulnerabilities :

• RCE
• Unrestricted File Upload

Programs :

• Undisclosed

Authors :

• Nick Berrie (@Machevalia)

Link :
https://machevalia.blog/blog/remote-code-execution-in-tgz-file-upload