[Privilege Escalation] Authenticated users can manipulate others fullname without their knowledge [Team Vector]
该报告还没有中文解读。
原文摘录
摘自原文(1101 字符中的一小部分)
Summary, When my free trial subscription was activated on wakatime.com, i also found that there is a new tab or features which is the `Teams`, In `Teams` you can manipulate again others `fullname` without their knowledge. as the details of my other reports [[Privilege Escalation] Authenticated …
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 WakaTime 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @r3y · 版权归作者与 WakaTime 所有