地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / CSRF: Replacing the router configuration backup having an 'operator' user and bypassing the "Referer:' whitelist protection
CSRF: Replacing the router configuration backup having an 'operator' user and bypassing the "Referer:' whitelist protection
业务逻辑
/
Unlabeled
/ #240098
厂商
Ubiquiti Inc.
严重程度
高危
· CVSS 9
赏金
—
弱点
Unlabeled
研究员
@hacknroll
披露日期
2017-11-24
资产
—
CVE
CVE-2017-0933
该报告还没有中文解读。
时间线
2017-06-15
报告提交
2017-11-24
公开披露
阅读 HackerOne 原文 ↗
作者 @hacknroll · 版权归作者与 Ubiquiti Inc. 所有
同类报告
Golden techniques to bypass host validations in Android apps
██████ · —
Lack of Rate Limiting on Account Creation Endpoint
XVIDEOS · 2025-01-16 · $200
SMAP bypass
PlayStation · 2021-05-27
Rate limit bypass on passport.acronis.work using X-Forwarded-For request header
Acronis · 2024-11-28
Able to bypass authorization logic and gain more access then intended
GitHub · 2026-07-15
Using special IPv4-mapped IPv6 addresses to bypass local IP ban
Cloudflare Public Bug Bounty · 2023-01-24 · $7,500