POJIA破甲
地图 / Unauthorized Use of Victim Credit Card

Unauthorized Use of Victim Credit Card

信息泄露 / 隐私侵犯 / #391385

厂商
Yelp
严重程度
低危 · CVSS 3.5
赏金
—
弱点
隐私侵犯
研究员
@hk755a
披露日期
2020-08-21
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(2150 字符中的一小部分)
SUMMARY Yelp user's credit cards are at risk of being compromised There's a way by which a malicious attacker can make unauthorized purchases from the victim's credit card. Just by getting the victim to some external website and clicking on it, the victim would have eventually paid for some …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Yelp 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @hk755a · 版权归作者与 Yelp 所有

同类报告

Physical Laptop TakeoverEd · 2018-08-12Connection informaton is sent to a third-party serviceNord Security · —Blocked user can see live videoTikTok · 2021-05-28 · $418Twitter ID exposure via error-based side-channel attackX / xAI · 2019-05-16 · $1,470Intent Leads To Unauthorised Video Call Initiation Leaking Surrounding Informations Of VictimSnapchat · 2024-04-05Changing email address on Twitter for Android unsets "Protect your Tweets"X / xAI · 2019-01-18 · $2,940
Unauthorized Use of Victim Credit Card · 破甲 POJIA