Sorare

Sorare 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 拒绝服务2
• 密码学缺陷1
• 其他弱点1

主要弱点

• 输入校验不当1
• Inadequate Encryption Strength1
• 资源消耗失控1
• Unlabeled1

常见资产

• api.sorare.comURL · 3
• sorare.comURL · 1

高票报告

当前状态 4 份 · 全部 4

1. 108
   Unsufficent input verification leads to DoS and resource consumption拒绝服务 · 2025-02-26 · 低危
   $300资源消耗失控
2. 57
   Circular based introspetion Query leading to single request denial of service and cost consumption and query cost on api.sorare.com/graphql拒绝服务 · 2024-10-17 · 中危
   $0Unlabeled
3. 49
   Mystery with a leaked token and Reusability of email confirmation link leading to Account Takeover密码学缺陷 · 2023-02-03 · 低危
   $300Inadequate Encryption Strength
4. 23
   Operation CreateOrUpdateSo5LineupMutation does not restrict multiple captains其他弱点 · 2023-08-01 · 低危
   $300输入校验不当