$203,000 bounties for 4 bugs in Azure Health Bot - 2x RCE, path traversal, memory leak

Опубликовано: 12 Октябрь 2024
на канале: Bug Bounty Reports Explained

5,484

302

📧 Subscribe to BBRE Premium: https://bbre.dev/premium
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw

This video is an explanation of the writeup of 4 bugs in Azure Health bot. The bugs were 2x RCEs, a path traversal and a memory leak.

🖥 Get $100 in credits for Digital Ocean: https://bbre.dev/do

Report: https://www.breachproof.net/blog/leth...
Reporter's Twitter: https://x.com/Yanir_/status/178792728...

Timestamps:

00:00 Intro
00:48 Sandbox escape by bypassing module allowlist
04:05 Sandbox escape by exploiting exising modules
06:12 Memory leak
07:30 Secondary path traversal