← 返回地图破甲

A HackerOne employee's GitHub personal access token exposed in Travis CI build logs

信息泄露 / 错误信息泄露 / #215625

厂商
HackerOne
严重程度
低危 · CVSS 6.8
赏金
$2,000
弱点
错误信息泄露
研究员
@sainaen
披露日期
2017-05-23
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1999 字符中的一小部分)
**Summary** A HackerOne employee Reed Loden ([GitHub:reedloden](https://github.com/reedloden)) exposed their personal access token twice in build logs of the [rubysec/rubysec.github.io](https://github.com/rubysec/rubysec.github.io) project: 1. …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。

时间线

阅读 HackerOne 原文 ↗作者 @sainaen · 版权归作者与 HackerOne 所有

同类报告

information disclosure of secret_key_base via encoding charctersGitLab · 2019-06-13 · $3,500Lack of rate limiting in https://███/PKI/PassReset.aspx leads to PII disclosure and potential account takeoverU.S. Dept Of Defense · 2024-10-25internal path disclosure via register errorTennessee Valley Authority · 2023-11-30phone number exposure for riders/drivers given email/uuidUber · 2017-06-02The impossibility of inclusion of the trial (BROWSER)New Relic · — · $200Origin IP address disclosure through Pingora response headerCloudflare Public Bug Bounty · 2023-01-10