地图 / [c-api.city-mobil.ru] Client authentication bypass leads to information disclosure

[c-api.city-mobil.ru] Client authentication bypass leads to information disclosure

身份认证 / Missing Authentication for Critical Function / #772118

厂商: Mail.ru
严重程度: 未评级
赏金: —
弱点: Missing Authentication for Critical Function
研究员: —
披露日期: —
资产: —
CVE: —

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者见原文 · 版权归作者与 Mail.ru 所有

同类报告

Token leak in security challenge flow allows retrieving victim's PayPal email and plain text passwordPayPal · 2020-01-08 · $15,300 Authentication bypass for ███ leads to take over any users account.Krisp · 2022-10-31 Unauthenticated access to Checkout Blocks employee-only endpoints exposed merchant metadataShopify · 2026-11-03 · $3,100 Unauthenticated go-httpbin servers : Leads to Cookie Tossing on *.aws.dev and Open RedirectAWS VDP · 2026-10-16 Unauthenticated self-registration on ████████ grants full access to internal supplier procurement portal and vendor dataEssity · 2026-10-14 Administration page visible without authenticationVisma Public · — · $100