地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Vine all registered user Private/sensitive information disclosure .[ Ip address/phone no/email and many other informations ]
Vine all registered user Private/sensitive information disclosure .[ Ip address/phone no/email and many other informations ]
信息泄露
/
信息泄露
/ #202823
厂商
X / xAI
严重程度
高危
· CVSS 9.3
赏金
—
弱点
信息泄露
研究员
@0xprial
披露日期
2017-07-11
资产
—
CVE
—
该报告还没有中文解读。
时间线
2017-02-02
报告提交
2017-07-11
公开披露
阅读 HackerOne 原文 ↗
作者 @0xprial · 版权归作者与 X / xAI 所有
同类报告
Confidential data of users and limited metadata of programs and reports accessible via GraphQL
HackerOne · 2019-02-03
Sensitive user information disclosure at bonjour.uber.com/marketplace/_rpc via the 'userUuid' parameter
Uber · 2019-09-09
The /reports/:id.json endpoint discloses potentially sensitive user attributes when reporter summary is present
HackerOne · 2025-04-01
Customer private program can disclose email any users through invited via username
HackerOne · 2020-05-15 · $7,500
Access to multiple production Grafana dashboards
Snapchat · 2020-11-04 · $10,000
Open prod Jenkins instance
Snapchat · 2017-08-19 · $15,000