Cross-protocol redirect to imap:// or smtp:// uploads the -F/MIMEPOST form and the custom Authorization/Cookie headers to the redirect target
信息泄露 / Information Exposure Through Sent Data / #4123474
该报告还没有中文解读。
原文摘录
摘自原文（8548 字符中的一小部分）
Summary: When a transfer that posts a multipart form (CURLOPT_MIMEPOST, the tool's `-F`) follows a redirect to an `imap://` URL, curl APPENDs the whole form to the mailbox on the redirect target and puts the application's CURLOPT_HTTPHEADER list into the mail headers, including custom …
原文中的代码
curl 8.23.0-DEV libcurl/8.23.0-DEV OpenSSL/3.6.4 curl-8_23_0, tool and static libcurl curl 8.23.1-DEV libcurl/8.23.1-DEV OpenSSL/3.6.4 master 59d2537b40, tool and static libcurl curl 8.22.0 ... AppleIDN ... (Homebrew, as shipped) tool and shared libcurl curl 8.7.1 (SecureTransport) …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 curl 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @sujitjaunjal · 版权归作者与 curl 所有