地图 / Wordpress Users Disclosure (/wp-json/wp/v2/users/) on sifchain.finance

Wordpress Users Disclosure (/wp-json/wp/v2/users/) on sifchain.finance

信息泄露 / Unlabeled / #1195194

厂商: Sifchain
严重程度: 低危
赏金: —
弱点: Unlabeled
研究员: @ibrahimatix0x01
披露日期: 2021-05-13
资产: https://github.com/sifchain/sifnode
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（4178 字符中的一小部分）

Using REST API, we can see all the WordPress users/author with some of their information.

原文中的代码

[{"id":194643529,"name":"alithecurios","url":"","description":"","link":"https:\/\/sifchain.finance\/author\/alithecurios\/","slug":"alithecurios","avatar_urls":{"24":"https:\/\/secure.gravatar.com\/avatar\/04fd4bda8c4fbc9e9803b9e7b443d20c?s=24&d=identicon&r=g","48":"https:\/\/secure.gravatar.com\/a …

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Sifchain 所有。

时间线

2021-05-12报告提交
2021-05-13公开披露

阅读 HackerOne 原文 ↗作者 @ibrahimatix0x01 · 版权归作者与 Sifchain 所有

同类报告

Github access token exposureShopify · 2021-07-26 · $50,000 Disclosing PolicyPageAssetGroup in Private Programs via /graphql `gid://hackerone/PolicyPageAssetGroupsIndex::PolicyPageAssetGroup/{id}`HackerOne · 2025-01-21 · $25,000 Informations disclosure - Access to some checkout informationsShopify · 2021-03-13 Disclosure handle private program with external linkHackerOne · 2021-08-24 · $2,500 Cloudflare WAF Bypass - Origin IP ExposureHemi VDP · 2025-03-27 [Zomato Order] Insecure deeplink leads to sensitive information disclosureEternal · 2021-09-23 · $750

Wordpress Users Disclosure (/wp-json/wp/v2/users/) on sifchain.finance · 破甲 POJIA