地图 / Giving myself access to NR1 UI / one.newrelic.com without the proper feature flags on my account

Giving myself access to NR1 UI / one.newrelic.com without the proper feature flags on my account

业务逻辑 / Client-Side Enforcement of Server-Side Security / #520623

厂商: New Relic
严重程度: 未评级
赏金: $500
弱点: Client-Side Enforcement of Server-Side Security
研究员: —
披露日期: —
资产: —
CVE: —

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者见原文 · 版权归作者与 New Relic 所有

同类报告

Incorrect control of the trial periodNord Security · —Information disclosure by sending a GIFLinkedIn · 2023-04-28 Yelp for Business: locked Email field silently editable via APIYelp · 2026-07-02 Ability to Disable the Login Attempt of any Shopify Owner for 24 hrs (Zero_Click)Shopify · 2022-02-15 · $900 Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer SubmissionNintendo · 2026-07-02 Unauthenticated read and write access to ALL endpoints of a store is possible for removed staff members who had "Apps" permissionShopify · 2019-10-10