地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
账户
地图 / Authentication bypass in Global Site Selector allows an attacker to log in as any user
Authentication bypass in Global Site Selector allows an attacker to log in as any user
身份认证
/
Unlabeled
/ #2248689
厂商
Nextcloud
严重程度
高危
· CVSS 9.6
赏金
—
弱点
Unlabeled
研究员
@ryotak
披露日期
2024-01-18
资产
nextcloud/globalsiteselector
CVE
CVE-2024-22212
该报告还没有中文解读。
时间线
2023-11-11
报告提交
2024-01-18
公开披露
阅读 HackerOne 原文 ↗
作者 @ryotak · 版权归作者与 Nextcloud 所有
同类报告
Takeover an account that doesn't have a Shopify ID and more
Shopify · 2020-09-02
Subdomain Takeover to Authentication bypass
Roblox · 2020-04-23
CVE-2019-5765: 1-click HackerOne account takeover on all Android devices
Chrome · —
GraphQL AdminGenerateSessionPayload is leaked to staff with no permission
Shopify · 2020-07-16
Session works after logout from Shopify account and password of online store is displayed
Shopify · 2020-04-27
FULL ACCOUNT TAKEOVER
MTN Group · 2024-08-17