Information leakage on django.aspen.io
该报告还没有中文解读。
原文摘录
摘自原文(393 字符中的一小部分)
I got a error message that disclose the version of nginx with OS detail, since The version of nginx is vulnerable to integer overflow. Impact: By seeing this information attacker can throw only interger overflow attack in order to get sensitive information Finally Request you to remove those …
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Aspen 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @the_krisk · 版权归作者与 Aspen 所有