POJIA破甲
地图 / Resource Consumption DOS on Edgemax v1.10.6

Resource Consumption DOS on Edgemax v1.10.6

拒绝服务 / 资源消耗失控 / #406614

厂商
Ubiquiti Inc.
严重程度
中危 · CVSS 8.3
赏金
—
弱点
资源消耗失控
研究员
@grampae
披露日期
2019-08-04
资产
EdgeMAX
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(2840 字符中的一小部分)
1: The request below shows that when you feed the beaker.session.id cookie variable a payload of 250 characters or more, the web management portal will produce an error page showing full path disclosure and more as shown in screenshots error1.png and error2.png.

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Ubiquiti Inc. 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @grampae · 版权归作者与 Ubiquiti Inc. 所有

同类报告

DoS on PayPal via web cache poisoningPayPal · 2019-10-23 · $9,700profile-picture name parameter with large value lead to DoS for other users and programs on the platformHackerOne · 2020-03-25Denial of service to WP-JSON API by cache poisoning the CORS allow origin headerAutomattic · 2020-04-16[Urgent] Invalidating OAuth2 Bearer token makes TweetDeck unavailableX / xAI · 2019-04-25Oracle Webcenter Sites administrative and hi-privilege access available directly from the internet (/cs/Satellite)LocalTapiola · — · $18,000Denial of service via cache poisoningHackerOne · 2018-12-22 · $2,500