地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Rocket.Chat Desktop client fails to open browser on 3rd party external actions from PDF documents
Rocket.Chat Desktop client fails to open browser on 3rd party external actions from PDF documents
密码学缺陷
/
敏感信息明文传输
/ #1967109
厂商
Rocket.Chat
严重程度
低危
赏金
—
弱点
敏感信息明文传输
研究员
@itssixtynein
披露日期
2024-07-11
资产
https://github.com/RocketChat/Rocket.Chat.Electron
CVE
—
该报告还没有中文解读。
时间线
2023-04-30
报告提交
2024-07-11
公开披露
阅读 HackerOne 原文 ↗
作者 @itssixtynein · 版权归作者与 Rocket.Chat 所有
同类报告
Reflected XSS and sensitive data exposure, including payment details, on lioncityrentals.com.sg
Uber · 2020-04-30 · $4,000
Password Reset Link Leaked In Refer Header In Request To Third Party Sites
Nord Security · —
Cleartext Transmission of Sensitive Information Leads to administrator access
Helium · 2020-05-30
fetlife.com/signup_step_profile expose access_token of mapbox.com
FetLife · 2023-11-01
Cleartext Transmission of password via Email
Sheer · 2024-04-22 · $200
Sensitive Info Leak - An Attacker Can Retrieve All the Users Mobile Numbers at https://website-api.production.curve.app/api/waitlist/us
Curve · 2020-10-23