地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Possible subdomain takeover at openapi.starbucks.com
Possible subdomain takeover at openapi.starbucks.com
错误配置
/
Unlabeled
/ #241503
厂商
Starbucks
严重程度
中危
赏金
—
弱点
Unlabeled
研究员
@benoculars
披露日期
2017-08-15
资产
Other non domain specific items
CVE
—
该报告还没有中文解读。
时间线
2017-06-19
报告提交
2017-08-15
公开披露
阅读 HackerOne 原文 ↗
作者 @benoculars · 版权归作者与 Starbucks 所有
同类报告
Able to Takeover Merchants Accounts Even They Have Already Setup SSO, After Bypassing the Email Confirmation
Shopify · 2020-04-01
[www.zomato.com] CORS Misconfiguration, could lead to disclosure of sensitive information
Eternal · 2018-11-28 · $550
Hackerone supports accounts organitation takeover
HackerOne · 2024-11-19 · $2,500
Subdomain takeover of resources.hackerone.com
HackerOne · 2020-05-15 · $500
CORS misconfiguration allows to steal client's "password", Authorization token and the customer details e.g. names, SSN, bank account etc.
LocalTapiola · —
Clickjacking in main domain https://topechelon.com/
Top Echelon Software · 2025-02-10