Collected research

Client Side Path Traversal (CSPT) Bug Bounty Reports and Techniques

Renwa and @RenwaX23 · Medium · 24 January 2025

Six bug bounty cases of client-side path traversal: front-end code builds an API path from a URL segment, so backslashes, double-encoded dots or router quirks send the fetch to a different endpoint. Pairing that with an open redirect or an uploaded JSON or image file to control the response gives DOM XSS, spoofed content and account takeover.

Record

Researcher

Renwa and @RenwaX23

Published by

Medium

Date

24 January 2025

Topic

XSS

In the archive

• Collected in the 2025 research round

Related sources

• Attachinary vulnerability report

Tags

• path-traversal
• xss
• open-redirect
• rest-api
• url-parsing
• file-upload
• dom
• nextjs
• bug-bounty
• attack-chain
• owasp-a01-2021
• owasp-a03-2021
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Renwa and @RenwaX23, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 16 August 2026.