Full Path Disclosure

Disclosed: 2016-01-06 05:14:57 By ishahriyar To owncloud
Unknown
Vulnerability Details
When I was trying to upload a html file as profile picture as a non admin user. then it popped up with a message containing full path . Like that "Could not obtain lock type 1 on "/opt/lampp/htdocs/owncloud/data/12/files/opt/lampp/htdocs/owncloud/data/12/cache/avatar_upload"." Thanks.
Actions
View on HackerOne
Report Stats
  • Report ID: 87505
  • State: Closed
  • Substate: resolved
  • Upvotes: 1
Share this report