No Rate Limit when accessing "Password protection" enabled surveys leads to bypassing passwords via "pd-pass_surveyid" cookie

业务逻辑 / 业务逻辑错误 / #905816

厂商

Automattic

严重程度

低危

赏金

—

弱点

业务逻辑错误

研究员

@bugra

披露日期

2020-11-18

资产

—

CVE

—

该报告还没有中文解读。

Summary: Hi team, If you write the right password on any password protected survey, you will see this request : {F878934}