Mastodon Feed: Post

Mastodon Feed

jonny@neuromatch.social ("jonny (nonvenomous)") wrote:

cool fuckin exfil vector annotated explicitly as POTENTIALLY DANGEROUS in the strings that appear to be a bundled threat assessment of every api route served by the hatch binary. why bother reporting things that are explicitly described in bug bounty categories when the entire fucking product is this way

DESC[0x445607f]: generate_podcast in-cell podcast-helper records a generated episode (and attaches publish URLs) for the owning user. Single-user VM. POSSIBLY DANGEROUS: a compromised in-cell caller can write attacker-controlled title/description text into the podcast catalog, which later surfaces in podcast listings; it can also point an episode's audio path/URL at arbitrary local/remote content.