[api.zomato.com] Abusing LocalParams (city_id) to Inject SOLR query

注入与走私 / Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) / #953203

厂商

Eternal

严重程度

低危 · CVSS 3.7

赏金

$150

弱点

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

研究员

@zzzhacker13

披露日期

2020-08-11

资产

*.zomato.com

CVE

—

该报告还没有中文解读。