地图 / Code injection

Code injection

注入与走私 / 资源注入 / #257207

厂商: Legal Robot
严重程度: 低危 · CVSS 3.5
赏金: —
弱点: 资源注入
研究员: @armaanpathan
披露日期: 2017-08-12
资产: app.legalrobot.com
CVE: —

该报告还没有中文解读。

时间线

2017-08-06报告提交
2017-08-12公开披露

阅读 HackerOne 原文 ↗作者 @armaanpathan · 版权归作者与 Legal Robot 所有

同类报告

Arbitrary local system file read on open-xchange serverOpen-Xchange · — · $2,000 Nextcloud Desktop Client RCE via malicious URI schemesNextcloud · 2021-04-15 · $1,000 [Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotelyNintendo · 2025-05-15 HTML injection possible with soft email confirmations when Administrator manually confirms attacker email addressGitLab · 2024-10-08 · $1,060 Content injection in Jira issue title enabling sending arbitrary POST request as victimGitLab · 2022-09-22 Arbitrary POST request as victim user from HTML injection in Jupyter notebooksGitLab · 2022-05-20