POJIA破甲
地图 / CORS misconfiguration allows to steal client's "password", Authorization token and the customer details e.g. names, SSN, bank account etc.

CORS misconfiguration allows to steal client's "password", Authorization token and the customer details e.g. names, SSN, bank account etc.

错误配置 / Unlabeled / #688567

厂商
LocalTapiola
严重程度
未评级
赏金
—
弱点
Unlabeled
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 LocalTapiola 所有

同类报告

Able to Takeover Merchants Accounts Even They Have Already Setup SSO, After Bypassing the Email ConfirmationShopify · 2020-04-01[www.zomato.com] CORS Misconfiguration, could lead to disclosure of sensitive informationEternal · 2018-11-28 · $550Hackerone supports accounts organitation takeoverHackerOne · 2024-11-19 · $2,500Subdomain takeover of resources.hackerone.comHackerOne · 2020-05-15 · $500Clickjacking in main domain https://topechelon.com/Top Echelon Software · 2025-02-10Subdomain takeover dew to missconfigured project settings for Custom domain .Flock · —