.git file accessible on remote.bittorrent.com

Disclosed: 2020-05-11 23:12:54 By aslanemre To btfs
Medium
Vulnerability Details
Hi team, i detected your .git file accessible for any unauthorized user. url : https://remote.bittorrent.com/static/webui/.git/config HTTP/1.1 200 OK Set-Cookie: BTURT=talon-i-0837bbfadd509c546-2; path=/; domain=.utorrent.com Server: TornadoServer/2.1.1git Connection: keep-alive Content-Length: 260 Last-Modified: Wed, 18 Mar 2015 19:18:46 GMT Accept-Ranges: bytes Content-Type: text/html; charset=UTF-8 Cache-Control: public Cache-Control: private [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = [email protected]:bittorrent/webui.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master ## Impact change perm for this
Actions
View on HackerOne
Report Stats
  • Report ID: 846400
  • State: Closed
  • Substate: informative
  • Upvotes: 4
Share this report