POJIA破甲
地图 / Stored XSS on https://paypal.com/signin via cache poisoning

Stored XSS on https://paypal.com/signin via cache poisoning

注入与走私 / HTTP 请求走私 / #488147

厂商
PayPal
严重程度
中危 · CVSS 8.7
赏金
$18,900
弱点
HTTP 请求走私
研究员
@albinowax
披露日期
2019-08-07
资产
*.paypal.com
CVE
—

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @albinowax · 版权归作者与 PayPal 所有

同类报告

Bypass for #488147 enables stored XSS on https://paypal.com/signin againPayPal · 2019-08-07 · $20,000Mass account takeovers using HTTP Request Smuggling on https://slackb.com/ to steal session cookiesSlack · 2020-03-12Request smuggling on admin-official.line.me could lead to account takeoverLY Corporation · 2020-05-19Stealing Zomato X-Access-Token: in Bulk using HTTP Request Smuggling on api.zomato.comEternal · 2020-07-09Password theft login.newrelic.com via Request SmugglingNew Relic · — · $3,000HTTP Request Smuggling via HTTP/2Basecamp · 2021-08-27 · $7,500