Xbox Edge Browser - File System Exposure
|Patched||unknown (presumed yes)|
|First patched system version||unknown|
Access local volumes using the Edge browser.
- Edge’s address bar allowed access of local files on the device via the
- This functionality is used for viewing local PDFs, etc but as the Xbox file system isn’t normally accessible, this allowed for the dumping of Xbox binaries.
- Any valid path would trigger a download prompt, copying the file to the user's download folder where it was accessible via the File Browser application.
This has been mitigated by the fact that the File Explorer application was disabled due to "Limited Usage"
- Enter any valid path into the edge browser url bar and prepend