POJIA破甲
地图 / Production Key and Data Found on Subdomain No Longer Operated by Shopify / Dangling DNS

Production Key and Data Found on Subdomain No Longer Operated by Shopify / Dangling DNS

信息泄露 / File and Directory Information Exposure / #1590115

厂商
Shopify
严重程度
低危
赏金
—
弱点
File and Directory Information Exposure
研究员
@ryanmoles6
披露日期
2024-05-01
资产
*.shopifykloud.com
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(862 字符中的一小部分)
Hello, Shopify team. I found the subdomain in http://honeybee-honeybee-ingress-data-presto-us-central1-2.shopify-data-presto-global.shopifykloud.com/languages

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Shopify 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @ryanmoles6 · 版权归作者与 Shopify 所有

同类报告

File listing through scripts folderTennessee Valley Authority · 2024-02-09Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://████U.S. Dept Of Defense · 2021-07-29Public and secret api key leaked via Solana BBP github repoSolana BBP · —Cookie exposure due to unexpected file permission changecurl · 2025-10-27LFI on Accounting server and RCE on FliteThermostat admin server50m-ctf · —Directory Listing at https://█.█.█.█8x8 · 2022-11-18