Summary by mickyvirus
I found a interesting vulnerability into Nasa Website that it unexpected disclosing the server path where the files are being hosted.
Full path disclosure vulnerability
Disclosed by mickyvirus- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date over 1 year ago
- Priority P5 Bugcrowd's VRT priority rating
- Status Resolved This vulnerability has been accepted and fixed