https://www.wotif.com/vc/blog/info.php script is prone to reflected HTML/CSS injection and COOKIE leak
该报告还没有中文解读。
原文摘录
摘自原文（6873 字符中的一小部分）
Summary: Hi, I've found that https://www.wotif.com/vs/blog/info.php script is prone to reflected HTML/CSS injection and COOKIE leak. I don't know what is the purpose of that script, however looks like it caches for ~1h a last request over HTTP GET with all HTTP headers send by user + some headers …
原文中的代码
TEMP => /tmp TMPDIR => /tmp TMP => /tmp PATH => /usr/local/bin:/usr/bin:/bin HOSTNAME => USER => nginx HOME => /var/lib/nginx HTTP_X_DATADOG_SAMPLING_PRIORITY => 0 HTTP_X_DATADOG_PARENT_ID => 2356387789306272938 HTTP_X_DATADOG_TRACE_ID => 2570661382097469643 HTTP_CGP_AGENT_IDS_DUAID => …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Expedia Group Bug Bounty 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @maskopatol · 版权归作者与 Expedia Group Bug Bounty 所有