地图 / Host header injection leads to account takeover

Host header injection leads to account takeover

跨站脚本 / Improper Neutralization of HTTP Headers for Scripting Syntax / #1623672

厂商: Enjin
严重程度: 中危
赏金: —
弱点: Improper Neutralization of HTTP Headers for Scripting Syntax
研究员: @ndizon_
披露日期: 2024-10-15
资产: cloud.enjin.io,goerli.cloud.enjin.io,jumpnet.cloud.enjin.io
CVE: —

该报告还没有中文解读。

时间线

2022-07-04报告提交
2024-10-15公开披露

阅读 HackerOne 原文 ↗作者 @ndizon_ · 版权归作者与 Enjin 所有

同类报告

Cache poisoning via X-Forwarded-Host in www.shopify.com/partners/blogShopify · 2020-09-11 · $1,000 HTTP Host injection in redirect_to functionRuby on Rails · 2021-06-15 Audit log validationWeblate · 2018-08-28

Host header injection leads to account takeover · 破甲 POJIA