地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Broken Access Control allows advertiser accounts to delete trackers they do not own
Broken Access Control allows advertiser accounts to delete trackers they do not own
访问控制
/
访问控制缺陷(通用)
/ #3445710
厂商
Revive Adserver
严重程度
中危
· CVSS 7.1
赏金
—
弱点
访问控制缺陷(通用)
研究员
@0xjad
披露日期
2026-01-14
资产
https://github.com/revive-adserver/revive-adserver
CVE
CVE-2026-21641
该报告还没有中文解读。
时间线
2025-11-30
报告提交
2026-01-14
公开披露
阅读 HackerOne 原文 ↗
作者 @0xjad · 版权归作者与 Revive Adserver 所有
同类报告
Account Takeover via Password Reset without user interactions
GitLab · 2025-02-26 · $35,000
Exfiltrate and mutate repository and project data through injected templated service
GitLab · 2019-03-05 · $11,000
Getting all the CD keys of any game
Valve · 2018-10-31 · $20,000
Ability to reset password for account
Upserve · 2019-06-06
Publicly accessible Continuous Integration Tool
Snapchat · 2021-07-29
One-click account hijack for anyone using Apple sign-in with Reddit, due to response-type switch + leaking href to XSS on www.redditmedia.com
Reddit · 2022-08-02