Multiple Path Transversal Vulnerabilites

Disclosed: 2023-11-28 09:00:34 By myselfphoton To torproject
Medium
Vulnerability Details
I have found multiple path transversal in *.torproject.org POC: [+] https://www.torproject.org/about/findoc/ [+] https://people.torproject.org/~infinity0/ [+] https://deb.torproject.org/torproject.org/ There are many many others which can be accessed by searching following in google: inurl:"index of" site:torproject.org I know that its out of scope of your bounty program but I thought I should tell you about it. Regards!
Actions
View on HackerOne
Report Stats
  • Report ID: 273377
  • State: Closed
  • Substate: not-applicable
  • Upvotes: 9
Share this report