[h1-2102] FQDN takeover on all Shopify wholesale customer domains by trailing dot (RFC 1034)
访问控制 / Incorrect Permission Assignment for Critical Resource / #1086108
该报告还没有中文解读。
原文摘录
摘自原文（4002 字符中的一小部分）
Summary: Due to a missing domain format check in Shopify's wholesale functionality, it is possible to serve arbitrary content on the customer's domain through existing DNS records already configured to work with Shopify. I only tested with domains that I own but as far as I understand, this would …
原文中的代码
Since a complete domain name ends with the root label, this leads to a
printed form which ends in a dot. We use this property to distinguish between:
- a character string which represents a complete domain name
(often called "absolute"). For example, "poneria.ISI.EDU."
- a character …默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Shopify 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @intidc · 版权归作者与 Shopify 所有