POJIA破甲
地图 / [Biz] [Mailer] Кроп любых* изображений расположенных на сервере

[Biz] [Mailer] Кроп любых* изображений расположенных на сервере

注入与走私 / 资源注入 / #1073485

厂商
Mail.ru
严重程度
未评级
赏金
—
弱点
资源注入
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Mail.ru 所有

同类报告

Arbitrary local system file read on open-xchange serverOpen-Xchange · — · $2,000Nextcloud Desktop Client RCE via malicious URI schemesNextcloud · 2021-04-15 · $1,000[Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotelyNintendo · 2025-05-15HTML injection possible with soft email confirmations when Administrator manually confirms attacker email addressGitLab · 2024-10-08 · $1,060Content injection in Jira issue title enabling sending arbitrary POST request as victimGitLab · 2022-09-22Arbitrary POST request as victim user from HTML injection in Jupyter notebooksGitLab · 2022-05-20