地图 / Access to support tickets and payment history, impersonate razer support staff

Access to support tickets and payment history, impersonate razer support staff

访问控制 / Improper Handling of Insufficient Permissions or Privileges / #776110

厂商: Razer
严重程度: 未评级
赏金: $1,500
弱点: Improper Handling of Insufficient Permissions or Privileges
研究员: —
披露日期: —
资产: —
CVE: —

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者见原文 · 版权归作者与 Razer 所有

同类报告

HTTP/2 PUSH_PROMISE header loss on OOM bypasses scheme validation (regression of 2e8c922a89)curl · 2026-03-31 A member-member privilege could access the https://console.rockset.com/billing?tab=payment page even though the billing page is hidden from the menu.Rockset · 2021-11-09 curl overwrites local file with -J option if file non-readable, but file writable.curl · 2020-08-01