POJIA破甲
地图 / subdomain take over at recommendation.algolia.com

subdomain take over at recommendation.algolia.com

错误配置 / 违反安全设计原则(按标题归类) / #673273

厂商
Algolia
严重程度
低危 · CVSS 4.3
赏金
—
弱点
违反安全设计原则(按标题归类)
研究员
@badcracker
披露日期
2019-08-14
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(490 字符中的一小部分)
Description hello sir, your subdomain recommendation.algolia.com cname is recommendation.us and recommendation.us is for sell which can lead to subdomain take over steps to reproduce 1. check the cname of recommendation.algolia.com 2. see that the cname "recommendation.us" is for sell using lookup …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Algolia 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @badcracker · 版权归作者与 Algolia 所有

同类报告

Bruteforce password recovery codeBumble · 2020-01-18Account creation with invalid email addresses / email is accepting % and %0d%0a line termination charsHackerOne · 2024-02-04 · $3,750Hacker.One Subdomain TakeoverHackerOne · 2016-09-20Stealing contact form data on www.hackerone.com using Marketo Forms XSS with postMessage frame-jumping and jQuery-JSONPHackerOne · 2017-08-29Unrestricted file upload in www.semrush.com > /my_reports/api/v1/upload/imageSemrush · 2020-01-10[Critical] Delete any accountOLX · —