地图 / Incorrect control of the trial period

Incorrect control of the trial period

业务逻辑 / Client-Side Enforcement of Server-Side Security / #865828

厂商: Nord Security
严重程度: 未评级
赏金: —
弱点: Client-Side Enforcement of Server-Side Security
研究员: —
披露日期: —
资产: —
CVE: —

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者见原文 · 版权归作者与 Nord Security 所有

同类报告

Information disclosure by sending a GIFLinkedIn · 2023-04-28 Yelp for Business: locked Email field silently editable via APIYelp · 2026-07-02 Ability to Disable the Login Attempt of any Shopify Owner for 24 hrs (Zero_Click)Shopify · 2022-02-15 · $900 Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer SubmissionNintendo · 2026-07-02 Unauthenticated read and write access to ALL endpoints of a store is possible for removed staff members who had "Apps" permissionShopify · 2019-10-10 Augur UI data can be completely replaced by an attacker which can lead to fund and reputation lossAugur · — · $5,000