地图 / I found another way to bypass Cloudflare Warp lock!

I found another way to bypass Cloudflare Warp lock!

业务逻辑 / Client-Side Enforcement of Server-Side Security / #1605847

厂商: Cloudflare Public Bug Bounty
严重程度: 中危 · CVSS 7.1
赏金: $1,000
弱点: Client-Side Enforcement of Server-Side Security
研究员: @oracularhades
披露日期: 2022-11-07
资产: WARP Mobile Apps
CVE: CVE-2022-3321

该报告还没有中文解读。

时间线

2022-06-18报告提交
2022-11-07公开披露

阅读 HackerOne 原文 ↗作者 @oracularhades · 版权归作者与 Cloudflare Public Bug Bounty 所有

同类报告

Incorrect control of the trial periodNord Security · —Information disclosure by sending a GIFLinkedIn · 2023-04-28 Yelp for Business: locked Email field silently editable via APIYelp · 2026-07-02 Ability to Disable the Login Attempt of any Shopify Owner for 24 hrs (Zero_Click)Shopify · 2022-02-15 · $900 Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer SubmissionNintendo · 2026-07-02 Unauthenticated read and write access to ALL endpoints of a store is possible for removed staff members who had "Apps" permissionShopify · 2019-10-10