Within seconds, Sarah had the keys to Cloud-Print’s entire cloud kingdom. Being an ethical researcher, she didn't log into their consoles. Instead, she immediately sent a to Eli’s team.
If a web application is improperly configured, it might execute this path and return the contents of the credentials file to the attacker’s browser. The consequences are often catastrophic: -template-..-2F..-2F..-2F..-2Froot-2F.aws-2Fcredentials