地图 / When uploading attachments, unencrypted file names are made available to the server

When uploading attachments, unencrypted file names are made available to the server

密码学缺陷 / Missing Encryption of Sensitive Data / #1206799

厂商: Bitwarden
严重程度: 未评级
赏金: —
弱点: Missing Encryption of Sensitive Data
研究员: @jjlin
披露日期: 2021-08-02
资产: vault.bitwarden.com
CVE: —

该报告还没有中文解读。

时间线

2021-05-24报告提交
2021-08-02公开披露

阅读 HackerOne 原文 ↗作者 @jjlin · 版权归作者与 Bitwarden 所有

同类报告

Password and mail address stored unencrypted in memory - Rockstar Game LauncherRockstar Games · 2023-10-27 · $750 curl HSTS long file name clears contentsInternet Bug Bounty · 2024-01-20 sensitive data-creds for database - private keyMars · 2024-11-19 CVE-2023-46219: HSTS long file name clears contentscurl · 2023-12-08 Unauthenticated phpinfo()files could lead to ability file read at █████████ [HtUS]U.S. Dept Of Defense · 2023-01-06 Yarn transfers npm credentials over unencrypted http connectionNode.js third-party modules · 2019-08-14