POJIA破甲
地图 / Race condition in faucet when using starport

Race condition in faucet when using starport

业务逻辑 / Unlabeled / #1438052

厂商
Cosmos
严重程度
高危 · CVSS 9.3
赏金
$5,000
弱点
Unlabeled
研究员
@cyberboy
披露日期
2022-07-26
资产
https://github.com/cometbft/cometbft
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(2246 字符中的一小部分)
Hi team, I and Aditya sent this bug over email on Wed, 29 Dec, 17:45 IST. Later we noticed that security reports are accepted via the HackerOne program. So, I am sending a copy of the bug report here.
原文中的代码
accounts:
  - name: alice
    coins: ["0token", "200000000stake"]
  - name: bob
    coins: ["500token", "100000000stake"]
validator:
  name: alice
  staked: "100000000stake"
client:
  openapi:
    path: "docs/static/openapi.yml"
  vuex:
    path: "vue/src/store"
faucet:
  name: bob
  coins: …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Cosmos 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @cyberboy · 版权归作者与 Cosmos 所有

同类报告

Golden techniques to bypass host validations in Android apps██████ · —Lack of Rate Limiting on Account Creation EndpointXVIDEOS · 2025-01-16 · $200SMAP bypassPlayStation · 2021-05-27Rate limit bypass on passport.acronis.work using X-Forwarded-For request headerAcronis · 2024-11-28Able to bypass authorization logic and gain more access then intendedGitHub · 2026-07-15Using special IPv4-mapped IPv6 addresses to bypass local IP banCloudflare Public Bug Bounty · 2023-01-24 · $7,500
Race condition in faucet when using starport · 破甲 POJIA