POJIA破甲
地图 / No Limit on Email Subscription

No Limit on Email Subscription

拒绝服务 / Allocation of Resources Without Limits or Throttling / #1085079

厂商
OpenMage
严重程度
低危
赏金
—
弱点
Allocation of Resources Without Limits or Throttling
研究员
@thecyberjerry
披露日期
2021-09-04
资产
demo.openmage.org
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1583 字符中的一小部分)
Summary: Hello Madison As I have Found a Business Logic Error which cause unlimited amount of Newsletter Subscription as you can see in the image i have provided

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 OpenMage 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @thecyberjerry · 版权归作者与 OpenMage 所有

同类报告

CVE-2024-41990: Potential denial-of-service in django.utils.html.urlize()Internet Bug Bounty · 2024-11-30 · $2,162High resource consumption by insufficient sanitization of forum threads paginationFlickr · 2025-11-24 · $479Memory Leak in libcurl via Location Header Handling (CWE-770)curl · 2025-05-22Security check upcurl · 2025-07-24HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiBcurl · 2026-05-19Unbounded memory growth with session handling in TLSv1.3Internet Bug Bounty · 2024-09-22 · $497