Add any depot to your app and access its contents without decryption key; via /apps/setcommonredists
High
V
Valve
Submitted None
Team Summary
Official summary from Valve
A parameter-validation error on an endpoint used to configure redistributable depots could be forced to add external depots to an existing (attacker-owned) app.
Actions:
Reported by
lolcanyouexplainagainpleaselol
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Improper Access Control - Generic