File upload only - down as low severity

[random-robbie]

Hi Guys,

Found a bucket that it shows will allow uploads but showing as a low severity

while not being able to list everything upload is still just as bad as you can overwrite files and cause mayhem.

[0xSobky]

Hey @random-robbie,

Good point. While a bucket that is publicly writeable can have its objects overwritten, you'll still have to guess the exact names of the objects stored in it. Nonetheless, this can sometimes be easy in cases where these objects are referenced in public webpages or so.

We'll discuss this internally and see if severity ratings need to be revised in upcoming releases. Until then, please keep filing any issues you encounter.

Thanks!