POJIA破甲
地图 / Administration page visible without authentication

Administration page visible without authentication

身份认证 / Missing Authentication for Critical Function / #809357

厂商
Visma Public
严重程度
未评级
赏金
$100
弱点
Missing Authentication for Critical Function
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Visma Public 所有

同类报告

Token leak in security challenge flow allows retrieving victim's PayPal email and plain text passwordPayPal · 2020-01-08 · $15,300[c-api.city-mobil.ru] Client authentication bypass leads to information disclosureMail.ru · —Authentication bypass for ███ leads to take over any users account.Krisp · 2022-10-31Unauthenticated access to Checkout Blocks employee-only endpoints exposed merchant metadataShopify · 2026-11-03 · $3,100Unauthenticated go-httpbin servers : Leads to Cookie Tossing on *.aws.dev and Open RedirectAWS VDP · 2026-10-16Unauthenticated self-registration on ████████ grants full access to internal supplier procurement portal and vendor dataEssity · 2026-10-14