Subdomain takeover of www█████████.affirm.com
该报告还没有中文解读。
原文摘录
摘自原文（1820 字符中的一小部分）
Summary Hi there, assuming you want this report as your policy mentions Affirm resources with third-parties, but the scope was a little unclear. Regardless, www█████.affirm.com points to an AWS S3 bucket `affirm-prod-www-cms█████████` that no longer exists. I was able to take control of this bucket …
原文中的代码
% curl https://www██████████.affirm.com [...] <Code>PermanentRedirect</Code> <Message>The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint.</Message> <Endpoint>s3.amazonaws.com</Endpoint> …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Affirm 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @ian · 版权归作者与 Affirm 所有