POJIA破甲
地图 / broken authentication (password reset link not expire after use in https://network.tochka.com/sign-up)

broken authentication (password reset link not expire after use in https://network.tochka.com/sign-up)

身份认证 / Weak Password Recovery Mechanism for Forgotten Password / #1401891

厂商
QIWI
严重程度
未评级
赏金
—
弱点
Weak Password Recovery Mechanism for Forgotten Password
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 QIWI 所有

同类报告

Reset any passwordpixiv · 2021-03-31Cookie steal through content UriBrave Software · 2021-04-22No length on passwordImgur · 2022-01-24Week Passwords generated by password reset functionMTN Group · 2020-05-09Reset password without knowing current passwordX / xAI · 2020-03-25(Possible) staff account takeover via reset token bruteforce at helpdesk.bistudio.comBOHEMIA INTERACTIVE a.s. · 2018-09-19