地图 / Bypass security fixes by downgrading version of application

Bypass security fixes by downgrading version of application

访问控制 / Reliance on Untrusted Inputs in a Security Decision / #419075

厂商: Mail.ru
严重程度: 未评级
赏金: $250
弱点: Reliance on Untrusted Inputs in a Security Decision
研究员: —
披露日期: —
资产: —
CVE: —

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者见原文 · 版权归作者与 Mail.ru 所有

同类报告

Bypass Email Verification -- Able to Access Internal Gitlab Services that use Login with Gitlab and Perform Check on email domainGitLab · 2019-08-30 Helpdesk Takeover at dmc.datastax.comDataStax · 2020-01-15 verify-release rebuilds from the tarball under verification, enabling pre-check command execution and false OK for a malicious curl release tarballcurl · 2026-06-17 [High] MITM via Insecure CA Path Handling in cURL (--capath, CURLOPT_CAPATH) (CWE-494: Download of Code Without Integrity Check)curl · 2025-06-30 [authdl.mail.ru] Spoofing IP addressMail.ru · —User registration using public domain email like gmail in place of professional email.Dropcontact · 2020-08-24

Bypass security fixes by downgrading version of application · 破甲 POJIA