地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
账户
地图 / User API Key leakage in Github commit leads to unauthorized access to sql.telemetry.mozilla.org
User API Key leakage in Github commit leads to unauthorized access to sql.telemetry.mozilla.org
信息泄露
/
信息泄露
/ #2735646
厂商
Mozilla
严重程度
中危
· CVSS 7.5
赏金
—
弱点
信息泄露
研究员
@anhchangmutrang
披露日期
2024-10-08
资产
—
CVE
—
该报告还没有中文解读。
时间线
2024-09-24
报告提交
2024-10-08
公开披露
阅读 HackerOne 原文 ↗
作者 @anhchangmutrang · 版权归作者与 Mozilla 所有
同类报告
Confidential data of users and limited metadata of programs and reports accessible via GraphQL
HackerOne · 2019-02-03
Sensitive user information disclosure at bonjour.uber.com/marketplace/_rpc via the 'userUuid' parameter
Uber · 2019-09-09
The /reports/:id.json endpoint discloses potentially sensitive user attributes when reporter summary is present
HackerOne · 2025-04-01
Customer private program can disclose email any users through invited via username
HackerOne · 2020-05-15 · $7,500
Access to multiple production Grafana dashboards
Snapchat · 2020-11-04 · $10,000
Open prod Jenkins instance
Snapchat · 2017-08-19 · $15,000