← 返回地图
破甲
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
information disclosure of secret_key_base via encoding charcters
信息泄露
/
错误信息泄露
/ #460545
厂商
GitLab
严重程度
中危
赏金
$3,500
弱点
错误信息泄露
研究员
@paresh_parmar
披露日期
2019-06-13
资产
customers.gitlab.com
CVE
—
该报告还没有中文解读。
时间线
2018-12-11
报告提交
2019-06-13
公开披露
阅读 HackerOne 原文 ↗
作者 @paresh_parmar · 版权归作者与 GitLab 所有
同类报告
Lack of rate limiting in https://███/PKI/PassReset.aspx leads to PII disclosure and potential account takeover
U.S. Dept Of Defense · 2024-10-25
A HackerOne employee's GitHub personal access token exposed in Travis CI build logs
HackerOne · 2017-05-23 · $2,000
internal path disclosure via register error
Tennessee Valley Authority · 2023-11-30
phone number exposure for riders/drivers given email/uuid
Uber · 2017-06-02
The impossibility of inclusion of the trial (BROWSER)
New Relic · — · $200
Origin IP address disclosure through Pingora response header
Cloudflare Public Bug Bounty · 2023-01-10