Can Data be Modified or Injected Through URL Path Traversal on a Storefront?
(Doc ID 2639980.1)
Last updated on JUNE 15, 2022
Applies to:
Oracle Commerce Cloud Service - Version N/A and laterInformation in this document applies to any platform.
Goal
Determine whether user accessing directly the internal server directories via the store URL https://ccstore-****.oracleoutsourcing.com/ccstore/v1/images/ ? source = / css /../ style.css will cause any issues.
Solution
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Goal |
Solution |