← 返回地图破甲

information disclosure of secret_key_base via encoding charcters

信息泄露 / 错误信息泄露 / #460545

厂商
GitLab
严重程度
中危
赏金
$3,500
弱点
错误信息泄露
研究员
@paresh_parmar
披露日期
2019-06-13
资产
customers.gitlab.com
CVE
—

该报告还没有中文解读。

时间线

阅读 HackerOne 原文 ↗作者 @paresh_parmar · 版权归作者与 GitLab 所有

同类报告

Lack of rate limiting in https://███/PKI/PassReset.aspx leads to PII disclosure and potential account takeoverU.S. Dept Of Defense · 2024-10-25A HackerOne employee's GitHub personal access token exposed in Travis CI build logsHackerOne · 2017-05-23 · $2,000internal path disclosure via register errorTennessee Valley Authority · 2023-11-30phone number exposure for riders/drivers given email/uuidUber · 2017-06-02The impossibility of inclusion of the trial (BROWSER)New Relic · — · $200Origin IP address disclosure through Pingora response headerCloudflare Public Bug Bounty · 2023-01-10