地图 / Missing Rate Limit in Password Change

Missing Rate Limit in Password Change

身份认证 / 认证尝试次数未限制 / #440495

厂商: Smule
严重程度: 低危
赏金: —
弱点: 认证尝试次数未限制
研究员: @dhakal_ananda
披露日期: 2019-07-12
资产: *.smule.com
CVE: —

该报告还没有中文解读。

时间线

2018-11-14报告提交
2019-07-12公开披露

阅读 HackerOne 原文 ↗作者 @dhakal_ananda · 版权归作者与 Smule 所有

同类报告

Account Takeover worki.ruMail.ru · — · $1,700 Account TakeOver at my.33slona.ruMail.ru · — · $1,700 Account Takeover at vseapteki.ruMail.ru · — · $2,000 Account TakeOver through password recovery at am.ruMail.ru · — · $3,000 SMS Brute Force Possibility via https://youdrive.today/login/web/code can lead to Account TakeoverMail.ru · —Lack of rate limitation on careers site allows the attacker to brute force the verification codeTikTok · 2021-02-11