地图 / Bypass Cloudflare WARP lock on iOS.

Bypass Cloudflare WARP lock on iOS.

业务逻辑 / Client-Side Enforcement of Server-Side Security / #1542450

厂商: Cloudflare Public Bug Bounty
严重程度: 低危 · CVSS 6.6
赏金: $500
弱点: Client-Side Enforcement of Server-Side Security
研究员: @oracularhades
披露日期: 2022-11-07
资产: WARP Mobile Apps
CVE: CVE-2022-3322

该报告还没有中文解读。

时间线

2022-04-16报告提交
2022-11-07公开披露

阅读 HackerOne 原文 ↗作者 @oracularhades · 版权归作者与 Cloudflare Public Bug Bounty 所有

同类报告

Incorrect control of the trial periodNord Security · —Information disclosure by sending a GIFLinkedIn · 2023-04-28 Yelp for Business: locked Email field silently editable via APIYelp · 2026-07-02 Ability to Disable the Login Attempt of any Shopify Owner for 24 hrs (Zero_Click)Shopify · 2022-02-15 · $900 Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer SubmissionNintendo · 2026-07-02 Unauthenticated read and write access to ALL endpoints of a store is possible for removed staff members who had "Apps" permissionShopify · 2019-10-10