地图 / Unauthenticated user can upload an attachment to the last updated report draft

Unauthenticated user can upload an attachment to the last updated report draft

内存破坏 / Improper Null Termination / #419896

厂商: HackerOne
严重程度: 中危 · CVSS 8.3
赏金: —
弱点: Improper Null Termination
研究员: @jobert
披露日期: 2018-10-09
资产: hackerone.com
CVE: —

该报告还没有中文解读。

时间线

2018-10-06报告提交
2018-10-09公开披露

阅读 HackerOne 原文 ↗作者 @jobert · 版权归作者与 HackerOne 所有

同类报告

HackerOne SAML signup domain enforcement bypass results in unauthorized access to HackerOne PullRequest organizationHackerOne · 2024-02-04 Improper input validation On Exported deep-link handler crashes `FileDisplayActivity` on crafted external URL — Denial-of-ServiceNextcloud · 2026-05-01 mbedTLS private-key blob null-termination asymmetry in lib/vtls/mbedtls.c (mbed_load_privkey)curl · 2026-05-07 Cache poisoning using NULL bytes and long URLsGreenhouse.io · 2018-09-16 Null byte Injection in https://████/U.S. Dept Of Defense · 2020-05-14 Improper handling of untypical characters in domain namesNode.js · 2021-09-10