daniel:// stenberg://Jul 9

"Arbitrary File Read via file:// Protocol in cURL"

Well, you see... 🤦‍♂️

Show threadSimonJul 9

you should use that as description in the man page

“FILE Read or write arbitrary local files.”

(Did they even notice they could write files?)

Show threadClaudiusJul 9
@smrqdt fuck if we throw sudo at it, we also have a pretty hefty privilege escalation!
Show threadSimon
@claudius check out the "proof" attachment in the hacker one report…
Jul 9 at 4:46pmWeb