A manager of a determinate group of users still might have access to any user account from any group that he doesn't administrate anymore.

业务逻辑 / Client-Side Enforcement of Server-Side Security / #268228

厂商

Mail.ru

严重程度

未评级

赏金

$500

弱点

Client-Side Enforcement of Server-Side Security

研究员

—

披露日期

—

资产

—

CVE

—

该报告还没有中文解读。