地图 / Ability to bypass locked Cloudflare WARP on wifi networks.

Ability to bypass locked Cloudflare WARP on wifi networks.

业务逻辑 / Client-Side Enforcement of Server-Side Security / #1635748

厂商: Cloudflare Public Bug Bounty
严重程度: 中危
赏金: $1,000
弱点: Client-Side Enforcement of Server-Side Security
研究员: @oracularhades
披露日期: 2022-11-16
资产: Cloudflare Zero Trust/Cloudflare One
CVE: CVE-2022-3512

该报告还没有中文解读。

时间线

2022-07-13报告提交
2022-11-16公开披露

阅读 HackerOne 原文 ↗作者 @oracularhades · 版权归作者与 Cloudflare Public Bug Bounty 所有

同类报告

Incorrect control of the trial periodNord Security · —Information disclosure by sending a GIFLinkedIn · 2023-04-28 Yelp for Business: locked Email field silently editable via APIYelp · 2026-07-02 Ability to Disable the Login Attempt of any Shopify Owner for 24 hrs (Zero_Click)Shopify · 2022-02-15 · $900 Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer SubmissionNintendo · 2026-07-02 Unauthenticated read and write access to ALL endpoints of a store is possible for removed staff members who had "Apps" permissionShopify · 2019-10-10