Miscellaneous :: Arbitrary File Write // Path Traversal


Problem Statement

The mutation uploadPaste allows uploading pastes from the user's computer by specifying the file along with the filename. The pastes are then stored on the server under a dedicated folder. The filename argument allows any string, effectively providing the ability to write the file to any location on the server's filesystem by traversing folders using ../../

Resources
Exploitation Solution