POJIA破甲
地图 / Fedora installation instructions fetch repo and validation key from insecure source, allowing mitm attack

Fedora installation instructions fetch repo and validation key from insecure source, allowing mitm attack

密码学缺陷 / Missing Required Cryptographic Step / #638250

厂商
Dropbox
严重程度
未评级
赏金
$216
弱点
Missing Required Cryptographic Step
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Dropbox 所有

同类报告

HMAC signature verification omits endpoint and payload allowing request forgery on CoinMate APICoinMate.io · 2026-05-20`check_reserve_proof` sums RingCT ECDH amounts without checking the output commitmentMonero · 2026-08-05SSL options ISSUERCERT, EC_CURVES and CRLFILE silently ignored by non-OpenSSL backendscurl · 2026-01-20SpendProofV1 txid-substitution: get_spend_proof/check_spend_proof do not verify returned transaction hashMonero · 2026-08-05Missing AES-GCM Authentication Tag Validation and Improper Deprecation HandlingNode.js · 2025-12-19Phabricator is vulnerable to padding oracle attacks and chosen-ciphertext attacks.Phabricator · 2017-04-05 · $750