Multiple Bugs in api.data.gov/signup endpoint leads to send custom messages to Anyone

其他弱点 / Unlabeled / #360171

厂商

GSA Bounty

严重程度

低危

赏金

—

弱点

Unlabeled

研究员

@pressihackerone

披露日期

2018-11-13

资产

api.data.gov

CVE

—

该报告还没有中文解读。

while signing for new api key, i have found two bugs that is unusual and make anyone to send crafted or customised email to someone.