Clickjacking at app.lemlist.com
该报告还没有中文解读。
原文摘录
摘自原文(1749 字符中的一小部分)
While performing security testing of your website i have found the vulnerability called Clickjacking. Many URLS are in scope and vulnerable to Clickjacking.
原文中的代码
<html lang="tr-TR"> <kafa> <meta karakter kümesi="UTF-8"> <title>Çerçeve Yapıyorum</title> </head> <body> <h3>clickjacking güvenlik açığı</h3> <iframe src="https://app.lemlist.com/teams/tea_sgYr5dZr478x4FQ9K/settings/user/usr_Z3GZ4DDHLLyLyZHj5/users" height="550px" width="700px"></iframe> </body> …
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 lemlist 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @scriptsavvy · 版权归作者与 lemlist 所有