Requesting unknown file type returns Ruby object w/ address

Disclosed: 2016-02-19 11:23:14 By run To security
Unknown
Vulnerability Details
Hello sec folks, requesting a report you are **not allowed** to acccess along with an **unhandled filetype extension** discloses a [Mime::NullType](http://edgeapi.rubyonrails.org/classes/Mime/NullType.html) Ruby object representation with a corresponding memory address. Example: https://hackerone.com/reports/1337.foo Request: ```http GET /reports/1337.foo HTTP/1.1 Host: hackerone.com ``` Response: ```http HTTP/1.1 401 Unauthorized .... Content-Type: #<Mime::NullType:0x007f3588fe32c8>; charset=utf-8 ... ``` Cheers!
Actions
View on HackerOne
Report Stats
  • Report ID: 109420
  • State: Closed
  • Substate: resolved
  • Upvotes: 2
Share this report