地图 / Unsafe downloaded file execution

Unsafe downloaded file execution

信息泄露 / User Interface (UI) Misrepresentation of Critical Information / #633600

厂商: Mail.ru
严重程度: 未评级
赏金: —
弱点: User Interface (UI) Misrepresentation of Critical Information
研究员: —
披露日期: —
资产: —
CVE: —

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者见原文 · 版权归作者与 Mail.ru 所有

同类报告

Incorrect security UI of files' download source on brave MacOSBrave Software · 2025-01-16 Mailsploit: a sender spoofing bug in over 30 email clientsInternet Bug Bounty · 2019-09-19 Content Spoofing/Text Injection in https://support.cs.money and JS file not minified and uglyfied which makes it clearly readableCS Money · 2020-11-12 Possible to spoof Origin in "Connected Sites"MetaMask · 2023-04-13 Content Spoofing/Text Injection at https://gateway-production.dubsmash.comReddit · 2021-10-27