地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Insecure Direct Object Reference Protection bypass by changing HTTP method in IBM Your Learning endpoint.
Insecure Direct Object Reference Protection bypass by changing HTTP method in IBM Your Learning endpoint.
不安全的直接对象引用
/
IDOR
/ #2456603
厂商
IBM
严重程度
高危
· CVSS 9.3
赏金
—
弱点
IDOR
研究员
@suryahss
披露日期
2024-05-01
资产
IBM Websites
CVE
—
该报告还没有中文解读。
时间线
2024-04-09
报告提交
2024-05-01
公开披露
阅读 HackerOne 原文 ↗
作者 @suryahss · 版权归作者与 IBM 所有
同类报告
Delete anyone's content spotlight remotely.
Snapchat · 2023-03-06 · $15,000
IDOR to add secondary users in www.paypal.com/businessmanage/users/api/v1/users
PayPal · 2019-07-30 · $10,500
How the Bug stole hacking
HackerOne · 2019-12-20
IDOR - Delete all Licenses and certifications from users account using CreateOrUpdateHackerCertification GraphQL query
HackerOne · 2023-08-29
IDOR allow access to payments data of any user
Nord Security · —
IDOR allows user to access report details via reference.json endpoint
HackerOne · 2026-10-01 · $15,000