CRITICAL-CLICKJACKING at Yelp Reservations Resulting in exposure of victim Private Data (Email info) + Victim Credit Card MissUse.

访问控制 / 访问控制缺陷（通用） / #355859

厂商

Yelp

严重程度

低危 · CVSS 6.3

赏金

—

弱点

访问控制缺陷（通用）

研究员

@hk755a

披露日期

2020-08-21

资产

—

CVE

—

该报告还没有中文解读。

Please have a look at this interesting article with precise explanation about Click-jacking security flaw: https://www.linkedin.com/pulse/20141202104842-120953718-why-am-i-anxious-about-clickjacking/