writeups.xyz / Remote Code Execution via Path Traversal in the Device Metadata Authoring Wizard

Submitter : c2a

Date: 6 February 2019

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• RCE

Programs :

• Microsoft

Authors :

• Lee Christensen (@Tifkin_)

Link :
https://posts.specterops.io/remote-code-execution-via-path-traversal-in-the-device-metadata-authoring-wizard-a0d5839fc54f