地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / CORS misconfiguration allows to steal client's "password", Authorization token and the customer details e.g. names, SSN, bank account etc.
CORS misconfiguration allows to steal client's "password", Authorization token and the customer details e.g. names, SSN, bank account etc.
错误配置
/
Unlabeled
/ #688567
厂商
LocalTapiola
严重程度
未评级
赏金
—
弱点
Unlabeled
研究员
—
披露日期
—
资产
—
CVE
—
该报告还没有中文解读。
时间线
暂无时间线。
阅读 HackerOne 原文 ↗
作者 见原文 · 版权归作者与 LocalTapiola 所有
同类报告
Able to Takeover Merchants Accounts Even They Have Already Setup SSO, After Bypassing the Email Confirmation
Shopify · 2020-04-01
[www.zomato.com] CORS Misconfiguration, could lead to disclosure of sensitive information
Eternal · 2018-11-28 · $550
Hackerone supports accounts organitation takeover
HackerOne · 2024-11-19 · $2,500
Subdomain takeover of resources.hackerone.com
HackerOne · 2020-05-15 · $500
Clickjacking in main domain https://topechelon.com/
Top Echelon Software · 2025-02-10
Subdomain takeover dew to missconfigured project settings for Custom domain .
Flock · —