业务逻辑

扫描器看不到的问题：竞态条件、价格篡改、流程跳步。需要真正理解业务才能找到。

影响

绕过支付、重复领取优惠或破坏业务流程的完整性

观察点

业务流程在不满足前置条件的情况下仍然完成

修复

在服务端校验完整的业务状态机，为关键操作加锁或使用幂等键，并对金额等字段做服务端计算。

弱点分布

• 业务逻辑错误392
• Unlabeled111
• 违反安全设计原则（按标题归类）71
• TOCTOU 竞态条件25
• Client-Side Enforcement of Server-Side Security20
• Modification of Assumed-Immutable Data (MAID)19
• Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')18
• Expected Behavior Violation4
• External Control of Critical State Data3
• Incorrect Comparison2
• Improper Synchronization1
• Leveraging Race Conditions1
• Partial String Comparison1

共现类别

暂无共现数据。

高票报告

当前状态 668 份 · 全部 668 · 筛选赏金 $175,271

1. 443
   Modify in-flight data to payment provider Smart2PayValve · 2021-08-11 · 严重
   $7,500业务逻辑错误
2. 372
   H1514 Ability to MiTM Shopify PoS Session to Takeover CommunicationsShopify · 2019-11-04 · 中危
   $0业务逻辑错误
3. 356
   Hackerone is not properly deleting user idHackerOne · 2021-06-12 · 中危
   $0业务逻辑错误
4. 324
   Double Payout via PayPalCoinbase · 2018-04-05 · 严重
   $10,000业务逻辑错误
5. 322
   Getting New Invitations without Leaving ProgramsHackerOne · 2020-10-16 · 低危
   $0业务逻辑错误
6. 319
   [fleet.city-mobil.ru] Driver balance increasingMail.ru · — · 未评级
   $0业务逻辑错误
7. 308
   Race Condition allows to redeem multiple times gift cards which leads to free "money"Reverb.com · 2020-01-26 · 高危
   $0业务逻辑错误
8. 307
   An attacker can run pipeline jobs as arbitrary userGitLab · 2020-08-26 · 严重
   $12,000业务逻辑错误
9. 278
   Golden techniques to bypass host validations in Android apps██████ · — · 未评级
   $0Unlabeled
10. 276
    Ethereum account balance manipulationCoinbase · 2018-03-21 · 严重
    $0业务逻辑错误
11. 273
    Ability to bypass partner email confirmation to take over any store given an employee emailShopify · 2018-02-07 · 严重
    $15,250TOCTOU 竞态条件
12. 267
    An attacker can buy marketplace articles for lower prices as it allows for negative quantity values leading to business lossSemrush · 2020-04-02 · 高危
    $0业务逻辑错误
13. 266
    Fee discounts can be redeemed many times, resulting in unlimited fee-free transactionsStripe · 2023-02-25 · 中危
    $5,000业务逻辑错误
14. 241
    Change phone number OTP flaw leads to any phone number takeoverinDrive · 2024-10-09 · 严重
    $2,000业务逻辑错误
15. 240
    Race condition in performing retest allows duplicated paymentsHackerOne · 2018-12-27 · 中危
    $0Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
16. 229
    [www.zomato.com] Availing Zomato Gold membership for free by tampering plan id(s)Eternal · 2019-03-18 · 中危
    $0业务逻辑错误
17. 223
    Config override using non-validated query parameter allows at least reflected XSS by injecting configuration into stateSuperhuman (formerly Grammarly) · 2021-03-02 · 中危
    $0业务逻辑错误
18. 208
    ETH contract handling errorsCoinbase · 2018-04-05 · 严重
    $0业务逻辑错误
19. 191
    Able to approve admin approval and change effective status without adding payment details .Reddit · 2022-06-22 · 高危
    $5,000业务逻辑错误
20. 188
    Incorrect control of the trial periodNord Security · — · 未评级
    $0Client-Side Enforcement of Server-Side Security
21. 187
    adding h1_analyst_* to username for normal usersHackerOne · 2023-04-12 · 低危
    $500业务逻辑错误
22. 167
    OLO Total price manipulation using negative quantitiesUpserve · 2019-07-07 · 严重
    $0业务逻辑错误
23. 160
    Abusing "Report as abuse" functionality to delete any user's post.Vanilla · — · 未评级
    $300业务逻辑错误
24. 159
    2-factor authentication can be disabled when logged in without confirming account passwordLocalize · 2020-02-10 · 中危
    $0业务逻辑错误
25. 159
    Takeover of Twitter-owned domain at mobileapplinking.comX / xAI · 2019-02-28 · 低危
    $0业务逻辑错误