Hi! This year I quit my corporate job to work full time on https://crucialexams.com/. This month I am working on expanding our new offerings at https://pmpready.com/ and https://vitalnursingexams.com/. Our platform provides a fun way for students to test their readiness for industry certification exams like the PMP, BCEN, CompTIA, AWS and more. Written in ASP.NET, MySQL as backend and good old Javascript/Bootstrap for the frontend. Nothing fancy, works great!
I wrote a script today to try and exploit this on our Grafana 8.1.2 instance but couldn't. Using Oauth for auth and only got 302 redirects back to the login page. Anyone else able to exploit this with Oauth?
It might be because of path normalization by your http client. For example, with `curl` you will also need to use `--path-as-is` to correctly test traversal. Another reason could be path normalization by the reverse proxy/WAF.
> --path-as-is
> Tell curl to not handle sequences of /../ or /./ in the given URL path. Normally curl will squash or merge