POJIA破甲
地图 / my.stripo.emai email verification bypassed and also create email templates

my.stripo.emai email verification bypassed and also create email templates

访问控制 / Reliance on Untrusted Inputs in a Security Decision / #765318

厂商
Stripo Inc
严重程度
低危
赏金
—
弱点
Reliance on Untrusted Inputs in a Security Decision
研究员
@h51ic0pt5r
披露日期
2020-02-04
资产
my.stripo.email
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1370 字符中的一小部分)
Summary: According to the Stripo.emai When the new user sign up Stripo.email allow to create email templates after the verification of the email of Your stripo account. Until your email get verified You are not able to create a email templates in your acc. User need to verified their email …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Stripo Inc 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @h51ic0pt5r · 版权归作者与 Stripo Inc 所有

同类报告

Bypass Email Verification -- Able to Access Internal Gitlab Services that use Login with Gitlab and Perform Check on email domainGitLab · 2019-08-30Helpdesk Takeover at dmc.datastax.comDataStax · 2020-01-15verify-release rebuilds from the tarball under verification, enabling pre-check command execution and false OK for a malicious curl release tarballcurl · 2026-06-17Bypass security fixes by downgrading version of applicationMail.ru · — · $250[High] MITM via Insecure CA Path Handling in cURL (--capath, CURLOPT_CAPATH) (CWE-494: Download of Code Without Integrity Check)curl · 2025-06-30[authdl.mail.ru] Spoofing IP addressMail.ru · —
my.stripo.emai email verification bypassed and also create email templates · 破甲 POJIA