地图 / User provided values passed to PHP unset() function

User provided values passed to PHP unset() function

内存破坏 / 类型混淆 / #292500

厂商: Coinbase
严重程度: 未评级
赏金: —
弱点: 类型混淆
研究员: @paulos__
披露日期: 2018-04-09
资产: com.coinbase.android
CVE: —

该报告还没有中文解读。

时间线

2017-11-22报告提交
2018-04-09公开披露

阅读 HackerOne 原文 ↗作者 @paulos__ · 版权归作者与 Coinbase 所有

同类报告

Image queue default key of 'None' and GraphQL unhandled type exceptionReddit · 2021-10-27 · $500 GnuTLS CURLINFO_TLS_SESSION / CURLINFO_TLS_SSL_PTR type confusioncurl · 2025-07-23 Incorrect Type Conversion in interpreting IPv4-mapped IPv6 addresses and below `curl` results in indeterminate SSRF vulnerabilities.curl · 2024-05-08 Insufficient Type Check leading to Developer ability to delete Project, Repository, Group, ...GitLab · 2020-11-02 · $5,000 Incorrect Encoding Conversion in hostname results in indeterminate SSRF vulnerabilitiescurl · 2024-06-18 37: `curl_mprintf` `%F` format specifier not consumed, causing variadic argument desynchronizationcurl · 2026-09-14