POJIA破甲
地图 / Rocket.Chat Desktop client fails to open browser on 3rd party external actions from PDF documents

Rocket.Chat Desktop client fails to open browser on 3rd party external actions from PDF documents

密码学缺陷 / 敏感信息明文传输 / #1967109

厂商
Rocket.Chat
严重程度
低危
赏金
—
弱点
敏感信息明文传输
研究员
@itssixtynein
披露日期
2024-07-11
资产
https://github.com/RocketChat/Rocket.Chat.Electron
CVE
—

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @itssixtynein · 版权归作者与 Rocket.Chat 所有

同类报告

Reflected XSS and sensitive data exposure, including payment details, on lioncityrentals.com.sgUber · 2020-04-30 · $4,000Password Reset Link Leaked In Refer Header In Request To Third Party SitesNord Security · —Cleartext Transmission of Sensitive Information Leads to administrator accessHelium · 2020-05-30fetlife.com/signup_step_profile expose access_token of mapbox.comFetLife · 2023-11-01Cleartext Transmission of password via EmailSheer · 2024-04-22 · $200Sensitive Info Leak - An Attacker Can Retrieve All the Users Mobile Numbers at https://website-api.production.curve.app/api/waitlist/usCurve · 2020-10-23