How Deleting My Own Video Gave Me Code Execution on a Production Server
13 min read
A webhook template, one missing semicolon, and an ordinary media deletion chained into remote code execution as the production web-server user.
A webhook template, one missing semicolon, and an ordinary media deletion chained into remote code execution as the production web-server user.