%0A (New line) and limitness URL leads to DoS at all system [Main adress (https://www.acronis.com/)]
该报告还没有中文解读。
原文摘录
摘自原文(5785 字符中的一小部分)
I found a DoS vulnerabilty at https://www.acronis.com/ (Note: site is still down and this is not intentional behavior and i didn't use any automated tool) At first i saw this code at site: <a href="URL/path">someting</a> and tried XSS but site was filtered " and '. So i tried with new line command …
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Acronis 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @plantos · 版权归作者与 Acronis 所有