地图 / [dev-unifi-go.ubnt.com] Insecure CORS, Stealing Cookies

[dev-unifi-go.ubnt.com] Insecure CORS, Stealing Cookies

信息泄露 / 错误信息泄露 / #219014

厂商: Ubiquiti Inc.
严重程度: 低危
赏金: —
弱点: 错误信息泄露
研究员: @bobrov
披露日期: 2017-08-28
资产: —
CVE: —

该报告还没有中文解读。

时间线

2017-04-06报告提交
2017-08-28公开披露

阅读 HackerOne 原文 ↗作者 @bobrov · 版权归作者与 Ubiquiti Inc. 所有

同类报告

information disclosure of secret_key_base via encoding charctersGitLab · 2019-06-13 · $3,500 Lack of rate limiting in https://███/PKI/PassReset.aspx leads to PII disclosure and potential account takeoverU.S. Dept Of Defense · 2024-10-25 A HackerOne employee's GitHub personal access token exposed in Travis CI build logsHackerOne · 2017-05-23 · $2,000 internal path disclosure via register errorTennessee Valley Authority · 2023-11-30 phone number exposure for riders/drivers given email/uuidUber · 2017-06-02 The impossibility of inclusion of the trial (BROWSER)New Relic · — · $200