3 ms·
I'm confused what happens here. Sure, you are tricked into pressing Return in a file open dialog. But you can't open the “file” `C:\`… right? Does that somehow
by TazeTSchnitzel 8y ago
I'm confused what happens here. Sure, you are tricked into pressing Return in a file open dialog. But you can't open the “file” `C:\`… right? Does that somehow let the page access files on the disk?
- andrewguenther 8y agoThe file dialog allows opening of folders as well, so the exploit is basically tricking the user into saying "I want to upload the folder C:\"