Summary

  • Abhijeet Kumawat is a security researcher who has found a vulnerability allowing him to make $300 in just five minutes.
  • The vulnerability he found is called server-side template injection which happens when an attacker can inject malicious input into a server-side template.
  • If the input fields are not properly sanitized, attackers can execute arbitrary code, extract sensitive data, or even take control of the server.
  • Kumawat noticed a signup form on a self-hosted website and was able to gain access to the system through a predefined input.
  • By reporting this vulnerability he was rewarded with a $300 bounty.

By Abhijeet Kumawat

Original Article