POJIA破甲
地图 / Content Spoofing/Text Injection at https://gateway-production.dubsmash.com

Content Spoofing/Text Injection at https://gateway-production.dubsmash.com

信息泄露 / User Interface (UI) Misrepresentation of Critical Information / #1166770

厂商
Reddit
严重程度
低危
赏金
—
弱点
User Interface (UI) Misrepresentation of Critical Information
研究员
@karthik86
披露日期
2021-10-27
资产
gateway-production.dubsmash.com
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(845 字符中的一小部分)
Summary:- Hi team i found security issue on your website https://gateway-production.dubsmash.com

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Reddit 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @karthik86 · 版权归作者与 Reddit 所有

同类报告

Incorrect security UI of files' download source on brave MacOSBrave Software · 2025-01-16Mailsploit: a sender spoofing bug in over 30 email clientsInternet Bug Bounty · 2019-09-19Content Spoofing/Text Injection in https://support.cs.money and JS file not minified and uglyfied which makes it clearly readableCS Money · 2020-11-12Possible to spoof Origin in "Connected Sites"MetaMask · 2023-04-13Unsafe downloaded file executionMail.ru · —