Shopify
Shopify 的公开漏洞报告、类别分布与常见资产。
467公开报告
$281,352披露赏金
17漏洞类别
10主要弱点
攻击面
弱点类别分布
主要弱点
常见资产
- · 185
- your-store.myshopify.comURL · 112
- Shopify Developed AppsOTHER · 49
- *.shopify.comWILDCARD · 27
- partners.shopify.comURL · 22
- accounts.shopify.comURL · 9
- *.shopifycloud.comWILDCARD · 9
- Plus Web Admin with Single Domain FeatureOTHER · 8
- exchangemarketplace.comURL · 7
- Shopify Mobile ApplicationsOTHER · 7
高票报告
当前状态 10 份 · 全部 467
- 78admin.shopify.com: Shopify Flow continues sending internal emails to a configured recipient after the staff author is removed信息泄露 · 2026-07-04 · 低危$0Unlabeled
- 76Exposure of shopify employee summit page allows anonymous user to place orders for free books业务逻辑 · 2024-07-29 · 低危$0业务逻辑错误
- 63Session Persistence Designed to Keep Users Logged In Across Multiple Devices (Intended Behaviour)身份认证 · 2025-09-05 · 低危$0会话固定
- 35mruby-engine: UAF in MRubyEngine#initialize enables local RCE其他弱点 · 2026-04-25 · 低危$0Unlabeled
- 28GraphQL Introspection Enabled on Shopify API Endpoint (Intended Behavior)信息泄露 · 2025-09-17 · 低危$0信息泄露
- 18Missing HMAC validation on /uninstall webhook in Shopify/sample-django-app reference template密码学缺陷 · 2026-06-02 · 低危$0Improper Verification of Cryptographic Signature
- 4XSS - URL Redirects跨站脚本 · 2015-05-17 · 低危$0XSS（通用）
- 3The POS Firmware is leaking the root Password which can be used for unauthorized access to the device.访问控制 · 2015-10-09 · 低危$0Unlabeled
- 3Multiple issues on Checkout Process错误配置 · 2015-05-22 · 低危$0违反安全设计原则（按标题归类）
- 3Lack of SSL Pinning on POS Application ( iOS )密码学缺陷 · 2015-05-22 · 低危$0密码学问题（通用）